0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 833.639870] 9pnet: Insufficient options for proto=fd [ 833.643810] 9pnet: Insufficient options for proto=fd 02:42:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:42:30 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:42:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:42:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:42:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 833.802575] selinux_netlink_send: 38 callbacks suppressed [ 833.802593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 [ 833.873596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 02:42:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 833.880945] 9pnet: Insufficient options for proto=fd [ 833.884854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 [ 833.891996] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 02:42:30 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 833.923753] 9pnet: Insufficient options for proto=fd 02:42:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:42:30 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:42:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f009078000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 834.077970] cgroup: fork rejected by pids controller in /syz0 [ 834.092023] 9pnet: Insufficient options for proto=fd [ 834.114815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 [ 834.133978] 9pnet: Insufficient options for proto=fd [ 834.147472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 [ 834.193431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 [ 834.211417] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 [ 834.260418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 [ 834.263440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=12509 comm=syz-executor.4 02:42:46 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:42:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:42:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(0x0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:42:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:42:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x4}, {0x6, 0x0, 0x0, 0x7a}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socketpair(0x27, 0x1, 0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, 0x16, 0x10, 0x70bd25, 0x25dfdbff, {0x19}, [@typed={0xc, 0x91, 0x0, 0x0, @u64}, @nested={0xf0, 0x1, 0x0, 0x1, [@typed={0x5, 0x43, 0x0, 0x0, @str='\x00'}, @typed={0x6a, 0xb, 0x0, 0x0, @binary="e3c2942eb0fb446126fa9cbacb6ae9ca2030820e426498e4d853b3ce661f838b83468b294ec355e4baa4835ac56173ab5ea77b587db4c12efb0e262232525cd18eb646641a69fdeead1da62766ad24d757e34c8cc970a492a6865aacf54c34fc28485a5ed4fd"}, @typed={0xb, 0x10, 0x0, 0x0, @str='],$@:\xf9\x00'}, @typed={0x5f, 0x5d, 0x0, 0x0, @binary="ce38ad100d77f77a247aa5792fbb63182be090494b901e7faf35ae10cc9d366f270ab1b80de5b09f3adbc9d256d9ef60a2de0010aff3923fb0492b47c05b2b8902206c88f152a3f96581997c576b60d702facece38fb85eea4fcf7"}, @typed={0xc, 0xe, 0x0, 0x0, @u64=0x1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 02:42:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:42:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:42:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 849.624775] 9pnet: Insufficient options for proto=fd 02:42:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 849.666733] 9pnet: Insufficient options for proto=fd 02:42:46 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:42:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:42:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:42:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:42:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 849.859012] selinux_netlink_send: 35 callbacks suppressed [ 849.859031] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 849.907619] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 849.915634] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 849.920857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 849.929343] 9pnet: Insufficient options for proto=fd [ 850.018037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 850.018680] 9pnet: Insufficient options for proto=fd [ 850.036937] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 850.107987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 850.125883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 850.165845] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 [ 850.168686] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=12765 comm=syz-executor.4 02:43:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(0x0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:43:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:43:02 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) 02:43:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r3, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:02 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x808, &(0x7f0000ffc000/0x3000)=nil, 0x4) getdents64(r1, &(0x7f00000007c0)=""/180, 0xb4) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x4) 02:43:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 865.898444] 9pnet: Insufficient options for proto=fd [ 865.933769] 9pnet: Insufficient options for proto=fd 02:43:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:43:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r3, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 865.968601] selinux_netlink_send: 38 callbacks suppressed [ 865.968614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 02:43:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 866.032460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 02:43:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 866.043708] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 [ 866.054351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 [ 866.067640] 9pnet: Insufficient options for proto=fd 02:43:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:02 executing program 1: syz_emit_ethernet(0x16a, &(0x7f0000000100)={@random="9471a1b3277f", @multicast, @val={@val={0x9100, 0x6, 0x0, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "a3b062", 0x12c, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, @empty, {[@srh={0x6, 0xe, 0x4, 0x7, 0x1, 0x20, 0x2bf3, [@dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @remote, @remote, @mcast2]}, @dstopts={0x87, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {0x4e20, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "14158df682fd8451d4474d53db76c4035ab39db2f568c70dc5c9ab2477e6352b", "d92973b5356a3e8f2ee512b82b824e0adbbd0574af40383735b3bf37c891d402819ecf81029fd81191fe323bf33f5f44", "bcd734906fec483cd55d941860db8b7d48afb01e1b29d57740b6ec78", {"e3aa68afa911707554ad3f0286e29ccd", "48c5e087d3863e9e5db2189dc93f3167"}}}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0xc73, 0xe62, 0xeba, 0x52]}) 02:43:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x2, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:43:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r2, 0x10000000) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r5}}, 0x81) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r4, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r3, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 866.166641] 9pnet: Insufficient options for proto=fd [ 866.183707] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 [ 866.193927] 9pnet: Insufficient options for proto=fd [ 866.198328] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 [ 866.215363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 02:43:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(0x0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:43:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 866.236886] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 [ 866.271602] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 [ 866.273098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=12904 comm=syz-executor.4 02:43:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, 0x0, 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:43:15 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) 02:43:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:15 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='autofs\x00', 0x3) 02:43:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {0x0, 0x0, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:43:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, 0x0, 0x0, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:15 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 879.185634] autofs4:pid:13070:autofs_fill_super: called with bogus options 02:43:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 879.246982] 9pnet: Insufficient options for proto=fd 02:43:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {0x0, 0x0, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 879.279337] 9pnet: Insufficient options for proto=fd 02:43:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, 0x0, 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:43:15 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:43:15 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x440100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, 0x30}}, 0x0) [ 879.332517] selinux_netlink_send: 38 callbacks suppressed [ 879.332536] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 02:43:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:15 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, 0x0, 0x0, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x0, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 879.416758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.435556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.449729] 9pnet: Insufficient options for proto=fd [ 879.456550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.496942] 9pnet: Insufficient options for proto=fd [ 879.562380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.569884] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.581440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.585684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.614757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 [ 879.617162] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=13065 comm=syz-executor.4 02:43:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) 02:43:29 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, 0x0, 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:43:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {0x0, 0x0, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:43:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) pipe(0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r6, &(0x7f0000001840)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000017c0)=@ieee802154}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x100000001, {0x0, r4}, 0x5, 0x1, 0x0, {0x0, r3, r0}}, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd_index, 0x0, 0x0}, 0xe32e) io_uring_enter(r0, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) 02:43:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:43:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, 0x0, 0x0, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x0, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 893.059579] 9pnet: Insufficient options for proto=fd 02:43:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 893.126579] 9pnet: Insufficient options for proto=fd 02:43:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x0) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400), 0x0, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:43:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 893.168346] selinux_netlink_send: 38 callbacks suppressed [ 893.168358] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 02:43:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) 02:43:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x0, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 893.222950] 9pnet: Insufficient options for proto=fd [ 893.240911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 [ 893.248803] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 [ 893.255399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 [ 893.292038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 [ 893.299664] 9pnet: Insufficient options for proto=fd [ 893.330860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 [ 893.384396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 [ 893.396452] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=13318 comm=syz-executor.4 [ 893.423440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=13450 comm=syz-executor.1 [ 893.465454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=13450 comm=syz-executor.1 02:43:44 executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x800) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f0000000100)=0x8, 0x4) sendfile(r1, r0, 0x0, 0x80464c453f) 02:43:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x0) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:43:44 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:43:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:43:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400), 0x0, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 907.822798] 9pnet: Insufficient options for proto=fd [ 907.871444] 9pnet: Insufficient options for proto=fd 02:43:44 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) flock(0xffffffffffffffff, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'wg0\x00'}) r0 = io_uring_setup(0x53d8, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x1, 0x1cf}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='system.posix_acl_access\x00', &(0x7f00000005c0)=""/194, 0xc2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd_index=0x9, 0x18, 0x6, 0xdc8, 0x1, 0x0, {0x2}}, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0), &(0x7f00000004c0)='./file0\x00', 0x100, 0x1000, 0x1}, 0x801) r2 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'}) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4) dup3(r2, 0xffffffffffffffff, 0x0) 02:43:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:43:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:43:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:43:44 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:43:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400), 0x0, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:43:44 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x0) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 908.090482] 9pnet: Insufficient options for proto=fd [ 908.154684] 9pnet: Insufficient options for proto=fd 02:44:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:00 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:00 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x145902, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup2(r4, r3) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xf4d3}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000001200)=0x4b) sendmsg$nl_generic(r6, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000003e40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="a81d6f9e4f7a05518fc85e6e9c77cf10f96b01ad3dea08177aba52453ee6a79ea672ff8c511c07e071000c668535bfef7c22282f80ece9aeb2a72ede26eda193333a380d4d53c1e1c38dd4f2553a036a2e81eb794e64039578477e65dda2019108f50b96cafeae9aa7c73ae6d554dab8d9f652d48c1e59806ffbe39b66712f27f21574c6118816b7db112fd1eda9dd3589d8fb6414008400fe8000000000000000000000000000aa000000"], 0x13dc}}, 0x0) quotactl(0x554, &(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000080)="6cd7ba36882557750da8c8207910e4caf072440977ea0379d7e05e1b30a9ff0f191459ed930989e9c4d875a943134623118d19c9b2b844eb11473ef9f0ac036b0457ddcf8c1afb92d46a917a8634a61c0e0c5491c01c791393ea9358abd79ece5dc9ad586dee6658f9cbaee061159fda2082054dcc70e24a3a1e39127a7e6e276fd5f80419ea21e2b4ea8b5f838d2155df005195a9cc68b4e053888055bf7e4b31613c182aba78e3ab7acabfd43c7642f8e4cd5c7110a10ac4ae640b4531a70959f2df0cfbd08670987767b72ec398792c") perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) 02:44:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f25780", 0xf, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:44:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc400, 0xa0) [ 923.461351] 9pnet: Insufficient options for proto=fd 02:44:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f25780", 0xf, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 923.549628] 9pnet: Insufficient options for proto=fd 02:44:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc400, 0xa0) 02:44:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:00 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, 0xffffffffffffffff, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 923.679442] 9pnet: Insufficient options for proto=fd [ 923.717358] 9pnet: Insufficient options for proto=fd 02:44:00 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:00 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc400, 0xa0) 02:44:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f25780", 0xf, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 923.877781] 9pnet: Insufficient options for proto=fd 02:44:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x0, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:13 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, 0xffffffffffffffff, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:44:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d3", 0x16, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0xa0) [ 937.182652] 9pnet: Insufficient options for proto=fd [ 937.196870] 9pnet: Insufficient options for proto=fd 02:44:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d3", 0x16, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, 0xffffffffffffffff, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:44:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0xa0) 02:44:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 937.405911] 9pnet: Insufficient options for proto=fd [ 937.460697] 9pnet: Insufficient options for proto=fd 02:44:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d3", 0x16, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @private=0xa010100}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x18) r2 = openat(0xffffffffffffffff, 0x0, 0x105142, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000340)="a20777a7796e3967f3410c803d62fea29d2a80ea16f6d19cd442cde01c10d6ccedcd440550cd73ad7c072256bf63c5fb671ca07aa0d7aa409b7d892492a75007c902a78af1b7db1c4e8d0674f5d696cc9f79f00b3bfc59d14106f46d3d4745c956bf4b358998169ed1672d6ef56fa9dd7fd0715654", 0x75) io_submit(0x0, 0x0, 0x0) openat(r0, &(0x7f00000002c0)='./file1\x00', 0x410802, 0x0) setgroups(0x4000000000000356, &(0x7f0000000380)) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000240)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000001140)=[{&(0x7f0000000080)="f2", 0x1}], 0x1, 0x0, 0x0) sendto(r2, &(0x7f0000000300)="b475a7d0b0de40319c8f4753bb3190d2031932d6e50eb1b08351c81a5be62dc116ac87bf7aac4434db1467348c1d9c50e1fb45312b0d37c2d09784a4f390fb9b", 0x40, 0x44012, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r4) close(r2) 02:44:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:44:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:44:29 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0xa0) [ 953.154676] 9pnet: Insufficient options for proto=fd [ 953.158553] 9pnet: Insufficient options for proto=fd [ 953.266756] selinux_netlink_send: 86 callbacks suppressed [ 953.266776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 02:44:29 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45bef", 0x1a, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0x0) 02:44:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x8, 0x0, 0x63, 0x0, 0x0, 0x6, 0x40546, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x67b}, 0x218, 0xf8, 0x9, 0x31eaf75c53ddb324, 0x8, 0xf5be, 0x1000, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r0, 0xa) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) ftruncate(r2, 0xffffffffffffff80) r3 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x0, @fd_index=0xa, 0x4, 0x0, 0x0, 0xd, 0x1, {0x2}}, 0xffff) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0) syz_io_uring_setup(0x5548, &(0x7f00000002c0)={0x0, 0xf22b, 0x2, 0x1, 0x3cc, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000400)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 02:44:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 953.403845] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 [ 953.430892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 [ 953.444721] 9pnet: Insufficient options for proto=fd [ 953.488736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 02:44:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45bef", 0x1a, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 953.528320] 9pnet: Insufficient options for proto=fd 02:44:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 953.555752] process 'syz-executor.1' launched '/dev/fd/-1' with NULL argv: empty string added 02:44:30 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:30 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:44:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0x0) [ 953.763567] 9pnet: Insufficient options for proto=fd [ 953.791330] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 [ 953.813629] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 [ 953.840410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 [ 953.860957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=13929 comm=syz-executor.4 02:44:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0xffffffffffffffff, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:43 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:43 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:44:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45bef", 0x1a, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:43 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0x0) 02:44:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:43 executing program 1: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=""/98, 0x62}, 0x0, 0x162, 0x0, {0x1}}, 0x6) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000240)=@v1={0x2, "d68b"}, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, 0x0, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) socketpair(0x2c, 0x3, 0x1, &(0x7f00000002c0)) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 967.243648] FAULT_INJECTION: forcing a failure. [ 967.243648] name failslab, interval 1, probability 0, space 0, times 1 [ 967.245445] CPU: 0 PID: 14095 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 967.246328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 967.247410] Call Trace: [ 967.247753] dump_stack+0x107/0x167 [ 967.248224] should_fail.cold+0x5/0xa [ 967.248716] should_failslab+0x5/0x20 [ 967.249204] kmem_cache_alloc_bulk+0x4b/0x320 [ 967.249781] io_submit_sqes+0x6fe6/0x8610 [ 967.250331] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.250970] __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.251601] ? find_held_lock+0x2c/0x110 [ 967.252129] ? io_submit_sqes+0x8610/0x8610 [ 967.252690] ? __mutex_unlock_slowpath+0xe1/0x600 [ 967.253317] ? wait_for_completion_io+0x270/0x270 [ 967.253945] ? rcu_read_lock_any_held+0x75/0xa0 [ 967.254549] ? vfs_write+0x354/0xb10 [ 967.255025] ? fput_many+0x2f/0x1a0 [ 967.255500] ? ksys_write+0x1a9/0x260 [ 967.255987] ? __ia32_sys_read+0xb0/0xb0 [ 967.256510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 967.257179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.257838] do_syscall_64+0x33/0x40 [ 967.258313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 967.258983] RIP: 0033:0x7f7089daab19 [ 967.259469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.261828] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 967.262805] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 967.263745] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 967.264668] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.265569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.266500] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 967.284668] 9pnet: Insufficient options for proto=fd [ 967.300920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:44:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe251", 0x1c, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 967.320709] 9pnet: Insufficient options for proto=fd 02:44:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:43 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:43 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 967.386245] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 [ 967.420600] FAULT_INJECTION: forcing a failure. [ 967.420600] name failslab, interval 1, probability 0, space 0, times 0 [ 967.422216] CPU: 0 PID: 14146 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 967.423049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 967.424035] Call Trace: [ 967.424356] dump_stack+0x107/0x167 [ 967.424796] should_fail.cold+0x5/0xa [ 967.425258] ? create_object.isra.0+0x3a/0xa20 [ 967.425806] should_failslab+0x5/0x20 [ 967.426264] kmem_cache_alloc+0x5b/0x310 [ 967.426754] create_object.isra.0+0x3a/0xa20 [ 967.427286] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 967.427897] kmem_cache_alloc_bulk+0x168/0x320 [ 967.428452] io_submit_sqes+0x6fe6/0x8610 [ 967.428968] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.429567] __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.430142] ? find_held_lock+0x2c/0x110 [ 967.430633] ? io_submit_sqes+0x8610/0x8610 [ 967.431161] ? __mutex_unlock_slowpath+0xe1/0x600 [ 967.431751] ? wait_for_completion_io+0x270/0x270 [ 967.432329] ? rcu_read_lock_any_held+0x75/0xa0 [ 967.432885] ? vfs_write+0x354/0xb10 [ 967.433335] ? fput_many+0x2f/0x1a0 [ 967.433774] ? ksys_write+0x1a9/0x260 [ 967.434236] ? __ia32_sys_read+0xb0/0xb0 [ 967.434726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 967.435368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.435985] do_syscall_64+0x33/0x40 [ 967.436430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 967.437039] RIP: 0033:0x7f7089daab19 [ 967.437481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.439692] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 967.440607] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 967.441457] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 967.442301] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.443142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.444006] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 967.456602] 9pnet: Insufficient options for proto=fd [ 967.473626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 02:44:44 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 967.475540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.476834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 02:44:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe251", 0x1c, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 967.485590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 967.487498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 [ 967.495926] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 02:44:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 967.525636] FAULT_INJECTION: forcing a failure. [ 967.525636] name failslab, interval 1, probability 0, space 0, times 0 [ 967.527152] CPU: 0 PID: 14184 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 967.527959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 967.528908] Call Trace: [ 967.529221] dump_stack+0x107/0x167 [ 967.529648] should_fail.cold+0x5/0xa [ 967.530098] should_failslab+0x5/0x20 [ 967.530533] kmem_cache_alloc_bulk+0x4b/0x320 [ 967.531050] io_submit_sqes+0x6fe6/0x8610 [ 967.531549] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.532125] __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.532686] ? find_held_lock+0x2c/0x110 [ 967.533157] ? io_submit_sqes+0x8610/0x8610 [ 967.533665] ? __mutex_unlock_slowpath+0xe1/0x600 [ 967.534220] ? wait_for_completion_io+0x270/0x270 [ 967.534774] ? rcu_read_lock_any_held+0x75/0xa0 [ 967.535310] ? vfs_write+0x354/0xb10 [ 967.535737] ? fput_many+0x2f/0x1a0 [ 967.536156] ? ksys_write+0x1a9/0x260 [ 967.536594] ? __ia32_sys_read+0xb0/0xb0 [ 967.537062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 967.537669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.538272] do_syscall_64+0x33/0x40 [ 967.538706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 967.539304] RIP: 0033:0x7f7d176d5b19 [ 967.539734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.541853] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 967.542742] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 967.543573] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 967.544398] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.545231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.546055] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 967.581304] 9pnet: Insufficient options for proto=fd [ 967.585888] 9pnet: Insufficient options for proto=fd 02:44:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 967.632869] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 [ 967.652775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 [ 967.678742] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 [ 967.689313] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 [ 967.708820] FAULT_INJECTION: forcing a failure. [ 967.708820] name failslab, interval 1, probability 0, space 0, times 0 [ 967.710183] CPU: 0 PID: 14237 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 967.710982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 967.711965] Call Trace: [ 967.712293] dump_stack+0x107/0x167 [ 967.712742] should_fail.cold+0x5/0xa [ 967.713216] ? create_object.isra.0+0x3a/0xa20 [ 967.713770] should_failslab+0x5/0x20 [ 967.714220] kmem_cache_alloc+0x5b/0x310 [ 967.714695] create_object.isra.0+0x3a/0xa20 [ 967.715204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 967.715805] kmem_cache_alloc_bulk+0x168/0x320 [ 967.716349] io_submit_sqes+0x6fe6/0x8610 [ 967.716856] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.717438] __do_sys_io_uring_enter+0x6b2/0x1890 [ 967.718000] ? find_held_lock+0x2c/0x110 [ 967.718478] ? io_submit_sqes+0x8610/0x8610 [ 967.718982] ? __mutex_unlock_slowpath+0xe1/0x600 [ 967.719558] ? wait_for_completion_io+0x270/0x270 [ 967.720120] ? rcu_read_lock_any_held+0x75/0xa0 [ 967.720659] ? vfs_write+0x354/0xb10 [ 967.721100] ? fput_many+0x2f/0x1a0 [ 967.721523] ? ksys_write+0x1a9/0x260 [ 967.721963] ? __ia32_sys_read+0xb0/0xb0 [ 967.722440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 967.723043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.723655] do_syscall_64+0x33/0x40 [ 967.724091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 967.724686] RIP: 0033:0x7f7089daab19 [ 967.725114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.727244] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 967.728134] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 967.728962] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 967.729784] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.730610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.731441] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 967.758701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 [ 967.760182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=14104 comm=syz-executor.4 02:44:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:44:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe251", 0x1c, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:44:58 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0xffffffffffffffff, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:58 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0xd8499488957a772f}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) timer_gettime(0x0, &(0x7f0000000280)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200008c1}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000300)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="00e9ff4f2a79f0486657732da5cc1b07005c962f68fa63b46f834203460e53648962a3625c7386419784eaf672c382b43c9e50c2c434f0ada12565b78a990d508efbae84b52f2f6e2cb21f86cac1715dd7fda204a8912f0d29147af6dd40feebad9c2f6c000d6ce1abbe299f01b00e25d556c7a623c438a773a6405f168339fc3df72ae1efad2e"]) [ 982.230976] FAULT_INJECTION: forcing a failure. [ 982.230976] name failslab, interval 1, probability 0, space 0, times 0 [ 982.232648] CPU: 0 PID: 14253 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 982.233523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.234607] Call Trace: [ 982.234979] dump_stack+0x107/0x167 [ 982.235445] should_fail.cold+0x5/0xa [ 982.235962] ? create_object.isra.0+0x3a/0xa20 [ 982.236557] should_failslab+0x5/0x20 [ 982.237052] kmem_cache_alloc+0x5b/0x310 [ 982.237584] ? mark_held_locks+0x9e/0xe0 [ 982.238104] create_object.isra.0+0x3a/0xa20 [ 982.238663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 982.239327] kmem_cache_alloc_bulk+0x168/0x320 [ 982.239922] io_submit_sqes+0x6fe6/0x8610 [ 982.240466] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.241099] __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.241733] ? find_held_lock+0x2c/0x110 [ 982.242250] ? io_submit_sqes+0x8610/0x8610 [ 982.242809] ? __mutex_unlock_slowpath+0xe1/0x600 [ 982.243420] ? wait_for_completion_io+0x270/0x270 [ 982.244038] ? rcu_read_lock_any_held+0x75/0xa0 [ 982.244625] ? vfs_write+0x354/0xb10 [ 982.245095] ? fput_many+0x2f/0x1a0 [ 982.245562] ? ksys_write+0x1a9/0x260 [ 982.246043] ? __ia32_sys_read+0xb0/0xb0 [ 982.246568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.247233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.247898] do_syscall_64+0x33/0x40 [ 982.248374] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.249042] RIP: 0033:0x7f7089daab19 [ 982.249532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.251904] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 982.252867] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 982.253775] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 982.254668] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.255575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.256500] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 982.287842] FAULT_INJECTION: forcing a failure. [ 982.287842] name failslab, interval 1, probability 0, space 0, times 0 [ 982.288911] 9pnet: Insufficient options for proto=fd [ 982.290708] CPU: 1 PID: 14264 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 982.292758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.294656] Call Trace: [ 982.295258] dump_stack+0x107/0x167 [ 982.296097] should_fail.cold+0x5/0xa [ 982.296965] ? create_object.isra.0+0x3a/0xa20 [ 982.298019] should_failslab+0x5/0x20 [ 982.298889] kmem_cache_alloc+0x5b/0x310 [ 982.299837] create_object.isra.0+0x3a/0xa20 [ 982.300832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 982.301989] kmem_cache_alloc_bulk+0x168/0x320 [ 982.303023] io_submit_sqes+0x6fe6/0x8610 [ 982.303994] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.305111] __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.306198] ? find_held_lock+0x2c/0x110 [ 982.307116] ? io_submit_sqes+0x8610/0x8610 [ 982.308104] ? __mutex_unlock_slowpath+0xe1/0x600 [ 982.309194] ? wait_for_completion_io+0x270/0x270 [ 982.310287] ? rcu_read_lock_any_held+0x75/0xa0 [ 982.311330] ? vfs_write+0x354/0xb10 [ 982.312173] ? fput_many+0x2f/0x1a0 [ 982.312995] ? ksys_write+0x1a9/0x260 [ 982.313852] ? __ia32_sys_read+0xb0/0xb0 [ 982.314768] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.315956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.317105] do_syscall_64+0x33/0x40 [ 982.317935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.319075] RIP: 0033:0x7f7d176d5b19 [ 982.319911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.321690] 9pnet: Insufficient options for proto=fd [ 982.324005] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 982.324027] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 982.324037] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 982.324048] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.324058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.324069] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:44:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0xffffffffffffffff, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:44:58 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x0, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 982.392897] selinux_netlink_send: 38 callbacks suppressed [ 982.392907] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 02:44:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:44:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 982.419965] 9pnet: Insufficient options for proto=fd [ 982.454369] FAULT_INJECTION: forcing a failure. [ 982.454369] name failslab, interval 1, probability 0, space 0, times 0 [ 982.455764] CPU: 0 PID: 14407 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 982.456570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.457542] Call Trace: [ 982.457856] dump_stack+0x107/0x167 [ 982.458279] should_fail.cold+0x5/0xa [ 982.458722] ? create_object.isra.0+0x3a/0xa20 [ 982.459258] should_failslab+0x5/0x20 [ 982.459702] kmem_cache_alloc+0x5b/0x310 [ 982.460183] ? mark_held_locks+0x9e/0xe0 [ 982.460658] create_object.isra.0+0x3a/0xa20 [ 982.461168] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 982.461767] kmem_cache_alloc_bulk+0x168/0x320 [ 982.462306] io_submit_sqes+0x6fe6/0x8610 [ 982.462806] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.463394] __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.463960] ? find_held_lock+0x2c/0x110 [ 982.464438] ? io_submit_sqes+0x8610/0x8610 [ 982.464947] ? __mutex_unlock_slowpath+0xe1/0x600 [ 982.465511] ? wait_for_completion_io+0x270/0x270 [ 982.466079] ? rcu_read_lock_any_held+0x75/0xa0 [ 982.466632] ? vfs_write+0x354/0xb10 [ 982.467066] ? fput_many+0x2f/0x1a0 [ 982.467493] ? ksys_write+0x1a9/0x260 [ 982.467950] ? __ia32_sys_read+0xb0/0xb0 [ 982.468428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.469036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.469636] do_syscall_64+0x33/0x40 [ 982.470071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.470665] RIP: 0033:0x7f7089daab19 [ 982.471104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.473255] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 982.474151] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 982.474980] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 982.475820] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.476651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.477483] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 982.483893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 [ 982.494188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 [ 982.499413] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 02:44:59 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x0, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, 0x0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 982.560910] 9pnet: Insufficient options for proto=fd 02:44:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 982.637998] FAULT_INJECTION: forcing a failure. [ 982.637998] name failslab, interval 1, probability 0, space 0, times 0 [ 982.639588] CPU: 0 PID: 14495 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 982.640397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.641360] Call Trace: [ 982.641670] dump_stack+0x107/0x167 [ 982.642092] should_fail.cold+0x5/0xa [ 982.642533] ? create_object.isra.0+0x3a/0xa20 [ 982.643061] should_failslab+0x5/0x20 [ 982.643503] kmem_cache_alloc+0x5b/0x310 [ 982.643978] ? mark_held_locks+0x9e/0xe0 [ 982.644448] create_object.isra.0+0x3a/0xa20 [ 982.644956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 982.645543] kmem_cache_alloc_bulk+0x168/0x320 [ 982.646074] io_submit_sqes+0x6fe6/0x8610 [ 982.646572] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.647153] __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.647708] ? find_held_lock+0x2c/0x110 [ 982.648192] ? io_submit_sqes+0x8610/0x8610 [ 982.648701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 982.649260] ? wait_for_completion_io+0x270/0x270 [ 982.649820] ? rcu_read_lock_any_held+0x75/0xa0 [ 982.650359] ? vfs_write+0x354/0xb10 [ 982.650786] ? fput_many+0x2f/0x1a0 [ 982.651208] ? ksys_write+0x1a9/0x260 [ 982.651649] ? __ia32_sys_read+0xb0/0xb0 [ 982.652129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.652736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.653342] do_syscall_64+0x33/0x40 [ 982.653774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.654365] RIP: 0033:0x7f7089daab19 [ 982.654793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.656932] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 982.657817] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 982.658641] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 982.659469] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.660303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.661134] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 982.664629] 9pnet: Insufficient options for proto=fd 02:44:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:44:59 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:44:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:44:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, 0x0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 982.758744] 9pnet: Insufficient options for proto=fd [ 982.765479] FAULT_INJECTION: forcing a failure. [ 982.765479] name failslab, interval 1, probability 0, space 0, times 0 [ 982.768151] CPU: 1 PID: 14499 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 982.769692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.771552] Call Trace: [ 982.772154] dump_stack+0x107/0x167 [ 982.772974] should_fail.cold+0x5/0xa [ 982.773838] ? create_object.isra.0+0x3a/0xa20 [ 982.774864] should_failslab+0x5/0x20 [ 982.775723] kmem_cache_alloc+0x5b/0x310 [ 982.776641] ? mark_held_locks+0x9e/0xe0 [ 982.777555] create_object.isra.0+0x3a/0xa20 [ 982.778539] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 982.779684] kmem_cache_alloc_bulk+0x168/0x320 [ 982.780723] io_submit_sqes+0x6fe6/0x8610 [ 982.781683] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.782798] __do_sys_io_uring_enter+0x6b2/0x1890 [ 982.783885] ? find_held_lock+0x2c/0x110 [ 982.784804] ? io_submit_sqes+0x8610/0x8610 [ 982.785778] ? __mutex_unlock_slowpath+0xe1/0x600 [ 982.786859] ? wait_for_completion_io+0x270/0x270 [ 982.787947] ? rcu_read_lock_any_held+0x75/0xa0 [ 982.788986] ? vfs_write+0x354/0xb10 [ 982.789816] ? fput_many+0x2f/0x1a0 [ 982.790625] ? ksys_write+0x1a9/0x260 [ 982.791471] ? __ia32_sys_read+0xb0/0xb0 [ 982.792394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.793558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.794703] do_syscall_64+0x33/0x40 [ 982.795531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.796678] RIP: 0033:0x7f7d176d5b19 [ 982.797504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.801598] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 982.803292] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 982.804881] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 982.806467] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.808061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.809644] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 982.857979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 [ 982.896467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 [ 982.937645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 [ 982.940504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 [ 982.965375] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 [ 982.968246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=14263 comm=syz-executor.4 02:45:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:45:13 executing program 1: semctl$IPC_RMID(0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0)=[{0x1, 0x403, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4, 0x9, 0x1000}], 0x4) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) lchown(&(0x7f0000000400)='./file2\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), 0x90041, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '@\xc1'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@pcr={'pcr', 0x3d, 0x35}}, {@subj_role={'subj_role', 0x3d, '{%}\''}}, {@dont_appraise}, {@dont_measure}, {@appraise_type}]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x3, 0x2, 0x3}, 0x14}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x7, 0x8, 0x7, 0x0, 0x5, 0x1c90, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x4, 0xffff}, 0x2002, 0x0, 0xcb2, 0x7, 0x3, 0x3, 0x20, 0x0, 0x4a48, 0x0, 0xfffffffffffffe01}, 0xffffffffffffffff, 0xd, r3, 0x2) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r4, 0x0, 0x0) 02:45:13 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, 0x0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:45:13 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x0, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:45:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:45:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) [ 996.619494] 9pnet: Insufficient options for proto=fd r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 996.638971] FAULT_INJECTION: forcing a failure. [ 996.638971] name failslab, interval 1, probability 0, space 0, times 0 [ 996.640345] CPU: 1 PID: 14633 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 996.641124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.642062] Call Trace: [ 996.642360] dump_stack+0x107/0x167 [ 996.642766] should_fail.cold+0x5/0xa [ 996.643191] ? create_object.isra.0+0x3a/0xa20 [ 996.643702] should_failslab+0x5/0x20 [ 996.644126] kmem_cache_alloc+0x5b/0x310 [ 996.644677] ? mark_held_locks+0x9e/0xe0 [ 996.645255] create_object.isra.0+0x3a/0xa20 [ 996.645810] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 996.646377] kmem_cache_alloc_bulk+0x168/0x320 [ 996.646892] io_submit_sqes+0x6fe6/0x8610 [ 996.647369] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 996.647923] __do_sys_io_uring_enter+0x6b2/0x1890 [ 996.648475] ? find_held_lock+0x2c/0x110 [ 996.648933] ? io_submit_sqes+0x8610/0x8610 [ 996.649425] ? __mutex_unlock_slowpath+0xe1/0x600 [ 996.649966] ? wait_for_completion_io+0x270/0x270 [ 996.650506] ? rcu_read_lock_any_held+0x75/0xa0 [ 996.651021] ? vfs_write+0x354/0xb10 [ 996.651435] ? fput_many+0x2f/0x1a0 [ 996.651839] ? ksys_write+0x1a9/0x260 [ 996.652272] ? __ia32_sys_read+0xb0/0xb0 [ 996.652726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.653311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.653889] do_syscall_64+0x33/0x40 [ 996.654304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.654872] RIP: 0033:0x7f7089daab19 [ 996.655288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.657347] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 996.657760] FAULT_INJECTION: forcing a failure. [ 996.657760] name failslab, interval 1, probability 0, space 0, times 0 [ 996.658208] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 996.658214] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 996.658219] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.658224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.658230] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 996.669924] CPU: 0 PID: 14635 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 996.671525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.673444] Call Trace: [ 996.674050] dump_stack+0x107/0x167 [ 996.674896] should_fail.cold+0x5/0xa [ 996.675770] ? create_object.isra.0+0x3a/0xa20 [ 996.676831] should_failslab+0x5/0x20 [ 996.677710] kmem_cache_alloc+0x5b/0x310 [ 996.678639] ? mark_held_locks+0x9e/0xe0 [ 996.679581] create_object.isra.0+0x3a/0xa20 [ 996.680609] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 996.681783] kmem_cache_alloc_bulk+0x168/0x320 [ 996.682833] io_submit_sqes+0x6fe6/0x8610 [ 996.683813] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 996.684992] __do_sys_io_uring_enter+0x6b2/0x1890 [ 996.686123] ? find_held_lock+0x2c/0x110 [ 996.687070] ? io_submit_sqes+0x8610/0x8610 [ 996.688077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 996.689207] ? wait_for_completion_io+0x270/0x270 [ 996.690333] ? rcu_read_lock_any_held+0x75/0xa0 [ 996.691421] ? vfs_write+0x354/0xb10 [ 996.692286] ? fput_many+0x2f/0x1a0 [ 996.693133] ? ksys_write+0x1a9/0x260 [ 996.694013] ? __ia32_sys_read+0xb0/0xb0 [ 996.694954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 996.696165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.697405] do_syscall_64+0x33/0x40 [ 996.697530] 9pnet: Insufficient options for proto=fd [ 996.698268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 996.698281] RIP: 0033:0x7f7d176d5b19 [ 996.698299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.698313] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 996.706833] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 996.708475] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 996.710120] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.711748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.713403] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 996.729551] audit: type=1400 audit(1738032313.324:56): avc: denied { module_load } for pid=14625 comm="syz-executor.1" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=98 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 996.736388] Module has invalid ELF structures [ 996.748282] cgroup: fork rejected by pids controller in /syz1 [ 996.800949] selinux_netlink_send: 34 callbacks suppressed [ 996.800960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.817324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.820099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.822281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.874745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.879725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.886988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.889929] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.905469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 [ 996.906847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=14636 comm=syz-executor.4 02:45:26 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:45:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x1}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x40005}, 0x0) close_range(r1, r0, 0x0) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0x3f, 0xc, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) futimesat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x0, 0x2710}}) r5 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r4) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) [ 1010.362679] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. 02:45:26 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x2, &(0x7f0000000600)=[{&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 1010.395618] FAULT_INJECTION: forcing a failure. [ 1010.395618] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.396994] CPU: 1 PID: 14860 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1010.397940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1010.398874] Call Trace: [ 1010.399173] dump_stack+0x107/0x167 [ 1010.399581] should_fail.cold+0x5/0xa 02:45:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:45:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:26 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:45:26 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1010.400020] ? create_object.isra.0+0x3a/0xa20 [ 1010.400688] should_failslab+0x5/0x20 [ 1010.401126] kmem_cache_alloc+0x5b/0x310 [ 1010.401583] ? mark_held_locks+0x9e/0xe0 [ 1010.402039] create_object.isra.0+0x3a/0xa20 [ 1010.402537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1010.403107] kmem_cache_alloc_bulk+0x168/0x320 [ 1010.403620] io_submit_sqes+0x6fe6/0x8610 [ 1010.404102] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.404664] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.405208] ? find_held_lock+0x2c/0x110 [ 1010.405669] ? io_submit_sqes+0x8610/0x8610 [ 1010.406166] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1010.406712] ? wait_for_completion_io+0x270/0x270 [ 1010.407268] ? rcu_read_lock_any_held+0x75/0xa0 [ 1010.407795] ? vfs_write+0x354/0xb10 [ 1010.408221] ? fput_many+0x2f/0x1a0 [ 1010.408641] ? ksys_write+0x1a9/0x260 [ 1010.409068] ? __ia32_sys_read+0xb0/0xb0 [ 1010.409529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1010.410116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1010.410703] do_syscall_64+0x33/0x40 [ 1010.411131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1010.411711] RIP: 0033:0x7f7d176d5b19 [ 1010.411733] FAULT_INJECTION: forcing a failure. [ 1010.411733] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.412124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1010.412131] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1010.412142] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1010.412148] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1010.412154] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.412160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.412165] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1010.426139] CPU: 0 PID: 14862 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1010.427416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1010.428944] Call Trace: [ 1010.429429] dump_stack+0x107/0x167 [ 1010.430094] should_fail.cold+0x5/0xa [ 1010.430795] ? create_object.isra.0+0x3a/0xa20 [ 1010.431623] should_failslab+0x5/0x20 [ 1010.432315] kmem_cache_alloc+0x5b/0x310 [ 1010.433073] ? mark_held_locks+0x9e/0xe0 [ 1010.433821] create_object.isra.0+0x3a/0xa20 [ 1010.434614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1010.434981] 9pnet: Insufficient options for proto=fd [ 1010.435540] kmem_cache_alloc_bulk+0x168/0x320 [ 1010.435563] io_submit_sqes+0x6fe6/0x8610 [ 1010.435605] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.438617] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.439499] ? find_held_lock+0x2c/0x110 [ 1010.440259] ? io_submit_sqes+0x8610/0x8610 [ 1010.441062] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1010.441943] ? wait_for_completion_io+0x270/0x270 [ 1010.442821] ? rcu_read_lock_any_held+0x75/0xa0 [ 1010.443665] ? vfs_write+0x354/0xb10 [ 1010.444341] ? fput_many+0x2f/0x1a0 [ 1010.445021] ? ksys_write+0x1a9/0x260 [ 1010.445723] ? __ia32_sys_read+0xb0/0xb0 [ 1010.446470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1010.447433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1010.448385] do_syscall_64+0x33/0x40 [ 1010.449075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1010.450016] RIP: 0033:0x7f7089daab19 [ 1010.450705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1010.454087] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1010.455483] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1010.456804] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1010.458114] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.459421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.460742] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 02:45:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:45:27 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x2, &(0x7f0000000600)=[{&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:45:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 1010.593762] selinux_netlink_send: 38 callbacks suppressed [ 1010.593778] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.596828] 9pnet: Insufficient options for proto=fd 02:45:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x5, 0x7, 0x80, 0x4, 0x0, 0x65, 0x8020, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8000, 0x2a}, 0x0, 0x3, 0x400, 0x0, 0x9, 0x7, 0x4a, 0x0, 0x3, 0x0, 0x7f}, 0xffffffffffffffff, 0x5, r0, 0x2) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') [ 1010.629418] FAULT_INJECTION: forcing a failure. [ 1010.629418] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.631861] CPU: 0 PID: 15055 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1010.633227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1010.634826] Call Trace: [ 1010.635350] dump_stack+0x107/0x167 [ 1010.636070] should_fail.cold+0x5/0xa [ 1010.636838] ? create_object.isra.0+0x3a/0xa20 [ 1010.637722] should_failslab+0x5/0x20 [ 1010.638452] kmem_cache_alloc+0x5b/0x310 [ 1010.639238] ? mark_held_locks+0x9e/0xe0 [ 1010.640040] create_object.isra.0+0x3a/0xa20 [ 1010.640911] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1010.641913] kmem_cache_alloc_bulk+0x168/0x320 [ 1010.642811] io_submit_sqes+0x6fe6/0x8610 [ 1010.643453] 9pnet: Insufficient options for proto=fd [ 1010.643646] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.645188] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.646121] ? find_held_lock+0x2c/0x110 [ 1010.646918] ? io_submit_sqes+0x8610/0x8610 [ 1010.647759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1010.648736] ? wait_for_completion_io+0x270/0x270 [ 1010.649667] ? rcu_read_lock_any_held+0x75/0xa0 [ 1010.650559] ? vfs_write+0x354/0xb10 [ 1010.651276] ? fput_many+0x2f/0x1a0 [ 1010.651981] ? ksys_write+0x1a9/0x260 [ 1010.652730] ? __ia32_sys_read+0xb0/0xb0 [ 1010.653508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1010.654532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1010.655537] do_syscall_64+0x33/0x40 [ 1010.656250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1010.657251] RIP: 0033:0x7f7089daab19 [ 1010.657968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1010.661523] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1010.663001] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1010.664371] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1010.665763] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.667142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.668515] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1010.678756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.694608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.706509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 02:45:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1010.742510] FAULT_INJECTION: forcing a failure. [ 1010.742510] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.743843] CPU: 1 PID: 15117 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1010.744607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1010.745551] Call Trace: [ 1010.745850] dump_stack+0x107/0x167 [ 1010.746259] should_fail.cold+0x5/0xa [ 1010.746697] should_failslab+0x5/0x20 [ 1010.747131] kmem_cache_alloc_bulk+0x4b/0x320 [ 1010.747639] io_submit_sqes+0x6fe6/0x8610 [ 1010.748128] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.748697] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.749254] ? find_held_lock+0x2c/0x110 [ 1010.749721] ? io_submit_sqes+0x8610/0x8610 [ 1010.750223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1010.750771] ? wait_for_completion_io+0x270/0x270 [ 1010.751330] ? rcu_read_lock_any_held+0x75/0xa0 [ 1010.751858] ? vfs_write+0x354/0xb10 [ 1010.752285] ? fput_many+0x2f/0x1a0 [ 1010.752706] ? ksys_write+0x1a9/0x260 [ 1010.753141] ? __ia32_sys_read+0xb0/0xb0 [ 1010.753613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1010.754212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1010.754799] do_syscall_64+0x33/0x40 [ 1010.755219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1010.755802] RIP: 0033:0x7f7089daab19 [ 1010.756226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1010.758307] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1010.759181] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1010.759986] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1010.760820] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.761645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1010.762463] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1010.767424] 9pnet: Insufficient options for proto=fd [ 1010.780743] FAULT_INJECTION: forcing a failure. [ 1010.780743] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.782081] CPU: 1 PID: 15105 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1010.782849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1010.783778] Call Trace: [ 1010.784077] dump_stack+0x107/0x167 [ 1010.784488] should_fail.cold+0x5/0xa [ 1010.784921] ? create_object.isra.0+0x3a/0xa20 [ 1010.785443] should_failslab+0x5/0x20 [ 1010.785869] kmem_cache_alloc+0x5b/0x310 [ 1010.786325] ? mark_held_locks+0x9e/0xe0 [ 1010.786781] create_object.isra.0+0x3a/0xa20 [ 1010.787276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1010.787851] kmem_cache_alloc_bulk+0x168/0x320 [ 1010.788370] io_submit_sqes+0x6fe6/0x8610 [ 1010.788862] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.789431] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1010.789978] ? find_held_lock+0x2c/0x110 [ 1010.790440] ? io_submit_sqes+0x8610/0x8610 [ 1010.790933] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1010.791472] ? wait_for_completion_io+0x270/0x270 [ 1010.792026] ? rcu_read_lock_any_held+0x75/0xa0 [ 1010.792556] ? vfs_write+0x354/0xb10 [ 1010.792990] ? fput_many+0x2f/0x1a0 [ 1010.793403] ? ksys_write+0x1a9/0x260 [ 1010.793832] ? __ia32_sys_read+0xb0/0xb0 [ 1010.794296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1010.794886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1010.795467] do_syscall_64+0x33/0x40 [ 1010.795895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1010.796473] RIP: 0033:0x7f7d176d5b19 [ 1010.796896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1010.798954] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1010.799813] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1010.800612] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1010.801422] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.802215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.803013] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1010.846484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.868702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.882837] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.886349] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.907552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1010.909145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=14856 comm=syz-executor.4 [ 1024.111897] FAULT_INJECTION: forcing a failure. [ 1024.111897] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.113443] CPU: 1 PID: 15218 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1024.114687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.115923] Call Trace: [ 1024.116273] dump_stack+0x107/0x167 [ 1024.116743] should_fail.cold+0x5/0xa [ 1024.117243] ? create_object.isra.0+0x3a/0xa20 [ 1024.117838] should_failslab+0x5/0x20 [ 1024.118342] kmem_cache_alloc+0x5b/0x310 [ 1024.118870] create_object.isra.0+0x3a/0xa20 [ 1024.119430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1024.120090] kmem_cache_alloc_bulk+0x168/0x320 [ 1024.120687] io_submit_sqes+0x6fe6/0x8610 [ 1024.121248] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.121876] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.122674] ? find_held_lock+0x2c/0x110 [ 1024.123314] ? io_submit_sqes+0x8610/0x8610 [ 1024.124042] ? __mutex_unlock_slowpath+0xe1/0x600 02:45:40 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:45:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x2, &(0x7f0000000600)=[{&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:45:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:45:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:40 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:45:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:45:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000000)=0x4, 0x4) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xa7, 0x10000) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000200)=0x2) [ 1024.124811] ? wait_for_completion_io+0x270/0x270 [ 1024.125652] ? rcu_read_lock_any_held+0x75/0xa0 [ 1024.126260] ? vfs_write+0x354/0xb10 [ 1024.126729] ? fput_many+0x2f/0x1a0 [ 1024.127195] ? ksys_write+0x1a9/0x260 [ 1024.127682] ? __ia32_sys_read+0xb0/0xb0 [ 1024.128198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1024.128870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1024.129554] do_syscall_64+0x33/0x40 [ 1024.130027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1024.130677] RIP: 0033:0x7f7089daab19 [ 1024.131148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.133512] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1024.134473] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1024.135386] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1024.136285] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.137209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x1, 0x0, 0x100000, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x6, 0x8001) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x5d4eede34afab00f, 0x0) sync_file_range(r4, 0xc0, 0xfffffffffffffff8, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$usbmon(&(0x7f0000000140), 0x6, 0x185643) poll(&(0x7f0000000180)=[{r7}], 0x1, 0x0) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a", 0x4c}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb63455f06e0ac29e00f522a151c2774de3ac62b0621adbe8f1cfca71952a01bd410dbd0731eb96367acfaef362026b898c9311a95951a302f26d1b3d3c6fb59470b3ce9e99d98277d23940f8e92a64207f20951d9407895b748c482f265db1", 0xbd, 0x5}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="2d242fd14d8ba06d2c2f465fb2dfc7414bf88fa9f61890e03a1fb0e0b04ae1328bd7897e84258162d0dd6f8e38968a9d7813f24a5a61e9a7436bf48401e60000fa4cbc19189bc32c7266646e6f2cb964fe5dc49d8d1455a464cb9a103970002c5b892c68617374dd4765cde948a32844be8fb4ed843005009eaaf040e8bae1f2db314c8a11ea265240a1214347dad4e929abb700c1b44c2c594f78bdd8e4f9d80b00cd1d5be3d05c067d2b4ca48777a7a163203461b12ca117f199a3001ab0da2858cec22e0bd3b3c7d2822b755a9b2e0376336673f1c32637eca268"]) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000580)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) [ 1024.138190] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1024.141658] nfs: Unknown parameter '-$/ÑM‹ m' [ 1024.149783] FAULT_INJECTION: forcing a failure. [ 1024.149783] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.152700] CPU: 0 PID: 15222 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1024.154301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.156225] Call Trace: [ 1024.156810] dump_stack+0x107/0x167 [ 1024.157681] should_fail.cold+0x5/0xa [ 1024.158512] ? create_object.isra.0+0x3a/0xa20 [ 1024.159515] should_failslab+0x5/0x20 [ 1024.159719] 9pnet: Insufficient options for proto=fd [ 1024.160399] kmem_cache_alloc+0x5b/0x310 [ 1024.160432] ? mark_held_locks+0x9e/0xe0 [ 1024.162838] create_object.isra.0+0x3a/0xa20 [ 1024.163805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1024.165015] kmem_cache_alloc_bulk+0x168/0x320 [ 1024.166077] io_submit_sqes+0x6fe6/0x8610 [ 1024.167013] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.168098] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.169156] ? find_held_lock+0x2c/0x110 [ 1024.170102] ? io_submit_sqes+0x8610/0x8610 [ 1024.171058] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1024.172187] ? wait_for_completion_io+0x270/0x270 [ 1024.173288] ? rcu_read_lock_any_held+0x75/0xa0 [ 1024.174368] ? vfs_write+0x354/0xb10 [ 1024.175222] ? fput_many+0x2f/0x1a0 [ 1024.176058] ? ksys_write+0x1a9/0x260 [ 1024.176936] ? __ia32_sys_read+0xb0/0xb0 [ 1024.177898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1024.179112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1024.180264] do_syscall_64+0x33/0x40 [ 1024.181162] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1024.182324] RIP: 0033:0x7f7d176d5b19 [ 1024.183203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.187372] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1024.189325] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1024.191245] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1024.192964] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.194611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.196248] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:45:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1024.215424] 9pnet: Insufficient options for proto=fd 02:45:40 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1024.287476] 9pnet: Insufficient options for proto=fd [ 1024.293640] selinux_netlink_send: 38 callbacks suppressed [ 1024.293663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 02:45:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 1024.345353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.377657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.386464] FAULT_INJECTION: forcing a failure. [ 1024.386464] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.388096] CPU: 1 PID: 15365 Comm: syz-executor.7 Not tainted 5.10.233 #1 02:45:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000002c0)={0x40, 0x2, 0xfffffaf2, 0x6, 0xffffffff, 0x40}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x87, 0x1, 0x9, 0xf9, 0x0, 0x8000, 0x5, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d84, 0x1, @perf_bp={&(0x7f0000000400)}, 0x0, 0x800, 0x4, 0x6, 0x80000001, 0x2, 0x9, 0x0, 0x7f, 0x0, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0xa) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/197, 0xc5}, {0x0}, {&(0x7f0000000300)=""/198, 0xc6}], 0x3) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xff, 0x8, 0xd0, 0x97, 0x0, 0xe0ab, 0x1008, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10840, 0x649, 0x1, 0x5, 0x40, 0xa, 0x7aba, 0x0, 0x7ff, 0x0, 0x761}, 0x0, 0x4, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x20) sendfile(r2, r3, 0x0, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020294024202f70726f632f6c6f636b73000a79f659b57d6e1dab8d28a8e4f0b7921d85b8b18d8512d20ac949feb08b7f4970c8931a33280a9ccbc35b1844245e1eed22ba828e885f473023a2e8191bb2c7557e74769c51b55532c90cf94c4fb19318c4e5081ffe786f31ada1e0fc01000100c952dc41efc15905d736d59ac7d1564d3a3b1d92a46f07c80a5f9425a9d1fe346c4c12212c1c57716f0ceb07000000b38874008c870a60ba10edcd9b28bbad9fcc0bdb3c9715d1c46667a1feb1398a4112b6cdb7b4523eb2aa1c5a3ad8c4"], 0x75) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0x145, 0xf, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x1, 0x0) move_pages(0x0, 0x2344, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x0) 02:45:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1024.388877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.390003] Call Trace: [ 1024.390312] dump_stack+0x107/0x167 [ 1024.390550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.390740] should_fail.cold+0x5/0xa [ 1024.393879] ? create_object.isra.0+0x3a/0xa20 [ 1024.394404] should_failslab+0x5/0x20 [ 1024.394841] kmem_cache_alloc+0x5b/0x310 [ 1024.395306] ? mark_held_locks+0x9e/0xe0 [ 1024.395772] create_object.isra.0+0x3a/0xa20 [ 1024.396271] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1024.396852] kmem_cache_alloc_bulk+0x168/0x320 [ 1024.397382] io_submit_sqes+0x6fe6/0x8610 [ 1024.397869] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.398438] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.398999] ? io_submit_sqes+0x8610/0x8610 [ 1024.399498] ? recalibrate_cpu_khz+0x10/0x10 [ 1024.400000] ? ktime_get+0x158/0x1f0 [ 1024.400434] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1024.400928] ? clockevents_program_event+0x131/0x360 [ 1024.401515] ? tick_program_event+0xa8/0x140 [ 1024.402018] ? hrtimer_interrupt+0x771/0x9b0 [ 1024.402526] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1024.403124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1024.403708] do_syscall_64+0x33/0x40 [ 1024.404131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1024.404713] RIP: 0033:0x7f7d176d5b19 [ 1024.405141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.407226] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1024.408088] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1024.408897] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1024.409720] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.410530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.411343] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1024.428965] 9pnet: Insufficient options for proto=fd 02:45:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{0x0, 0x0, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:45:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1024.472428] FAULT_INJECTION: forcing a failure. [ 1024.472428] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.475298] CPU: 0 PID: 15400 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1024.476886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.478795] Call Trace: [ 1024.479442] dump_stack+0x107/0x167 [ 1024.480268] should_fail.cold+0x5/0xa [ 1024.481182] ? create_object.isra.0+0x3a/0xa20 [ 1024.482209] should_failslab+0x5/0x20 [ 1024.483100] kmem_cache_alloc+0x5b/0x310 [ 1024.484012] ? mark_held_locks+0x9e/0xe0 [ 1024.484956] create_object.isra.0+0x3a/0xa20 [ 1024.485952] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1024.487130] kmem_cache_alloc_bulk+0x168/0x320 [ 1024.488195] io_submit_sqes+0x6fe6/0x8610 [ 1024.489197] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.490359] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1024.491414] ? find_held_lock+0x2c/0x110 [ 1024.492304] ? io_submit_sqes+0x8610/0x8610 [ 1024.493300] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1024.493325] 9pnet: Insufficient options for proto=fd [ 1024.494413] ? wait_for_completion_io+0x270/0x270 [ 1024.494439] ? rcu_read_lock_any_held+0x75/0xa0 [ 1024.497458] ? vfs_write+0x354/0xb10 [ 1024.498445] ? fput_many+0x2f/0x1a0 [ 1024.499419] ? ksys_write+0x1a9/0x260 [ 1024.500308] ? __ia32_sys_read+0xb0/0xb0 [ 1024.501298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1024.502443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1024.503621] do_syscall_64+0x33/0x40 [ 1024.504493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1024.505670] RIP: 0033:0x7f7089daab19 [ 1024.506541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.510729] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1024.512545] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1024.514217] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1024.515826] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1024.517476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1024.519091] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1024.539956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.559674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.583509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.604282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.630288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 [ 1024.631731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=15330 comm=syz-executor.4 02:45:53 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:45:53 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{0x0, 0x0, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:45:53 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:45:53 executing program 1: open(0x0, 0x100, 0x38) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') readv(r1, &(0x7f0000000480)=[{&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000000)=""/111, 0x6f}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40080008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000050}, 0x800) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x8401) r2 = fsmount(0xffffffffffffffff, 0x1, 0x70) syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 02:45:53 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:45:53 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x0) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1037.261628] FAULT_INJECTION: forcing a failure. [ 1037.261628] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.264423] CPU: 1 PID: 15476 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1037.265990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.267853] Call Trace: [ 1037.268447] dump_stack+0x107/0x167 [ 1037.269262] should_fail.cold+0x5/0xa [ 1037.270137] ? create_object.isra.0+0x3a/0xa20 [ 1037.271162] should_failslab+0x5/0x20 [ 1037.272020] kmem_cache_alloc+0x5b/0x310 [ 1037.272939] ? mark_held_locks+0x9e/0xe0 [ 1037.273864] create_object.isra.0+0x3a/0xa20 [ 1037.274844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1037.275994] kmem_cache_alloc_bulk+0x168/0x320 [ 1037.277034] io_submit_sqes+0x6fe6/0x8610 [ 1037.278005] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.279118] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.280206] ? find_held_lock+0x2c/0x110 [ 1037.281121] ? io_submit_sqes+0x8610/0x8610 [ 1037.282112] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1037.283197] ? wait_for_completion_io+0x270/0x270 [ 1037.284284] ? rcu_read_lock_any_held+0x75/0xa0 [ 1037.285328] ? vfs_write+0x354/0xb10 [ 1037.286178] ? fput_many+0x2f/0x1a0 [ 1037.286998] ? ksys_write+0x1a9/0x260 [ 1037.287856] ? __ia32_sys_read+0xb0/0xb0 [ 1037.288781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.289964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.291129] do_syscall_64+0x33/0x40 [ 1037.291962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.293115] RIP: 0033:0x7f7089daab19 [ 1037.293963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.298096] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1037.299801] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1037.301402] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1037.303014] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.304617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.306223] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1037.317741] FAULT_INJECTION: forcing a failure. [ 1037.317741] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.320451] CPU: 1 PID: 15469 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1037.322001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.323856] Call Trace: [ 1037.324455] dump_stack+0x107/0x167 [ 1037.325275] should_fail.cold+0x5/0xa [ 1037.326136] ? create_object.isra.0+0x3a/0xa20 [ 1037.327163] should_failslab+0x5/0x20 [ 1037.328017] kmem_cache_alloc+0x5b/0x310 [ 1037.328931] ? mark_held_locks+0x9e/0xe0 [ 1037.329861] create_object.isra.0+0x3a/0xa20 [ 1037.330850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1037.332000] kmem_cache_alloc_bulk+0x168/0x320 [ 1037.333027] io_submit_sqes+0x6fe6/0x8610 [ 1037.333981] ? percpu_ref_tryget_many+0x142/0x2d0 [ 1037.335077] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.336233] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.337352] ? io_submit_sqes+0x8610/0x8610 [ 1037.338330] ? recalibrate_cpu_khz+0x10/0x10 [ 1037.339304] ? ktime_get+0x158/0x1f0 [ 1037.340139] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1037.341100] ? clockevents_program_event+0x131/0x360 [ 1037.342240] ? tick_program_event+0xa8/0x140 [ 1037.343220] ? hrtimer_interrupt+0x771/0x9b0 [ 1037.344216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.345387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.346553] do_syscall_64+0x33/0x40 [ 1037.347390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.348536] RIP: 0033:0x7f7d176d5b19 [ 1037.349371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.353485] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1037.355182] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1037.356768] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1037.358366] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.359948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.361547] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1037.387832] 9pnet: Insufficient options for proto=fd 02:45:53 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x0) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1037.432458] 9pnet: Insufficient options for proto=fd 02:45:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:45:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{0x0, 0x0, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:45:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1037.512432] selinux_netlink_send: 38 callbacks suppressed [ 1037.512458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.521672] FAULT_INJECTION: forcing a failure. [ 1037.521672] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.523316] CPU: 0 PID: 15538 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1037.524071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.524965] Call Trace: [ 1037.525256] dump_stack+0x107/0x167 [ 1037.525668] should_fail.cold+0x5/0xa [ 1037.526087] should_failslab+0x5/0x20 [ 1037.526501] kmem_cache_alloc_bulk+0x4b/0x320 [ 1037.527040] io_submit_sqes+0x6fe6/0x8610 [ 1037.527507] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.528101] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.528677] ? find_held_lock+0x2c/0x110 [ 1037.529158] ? io_submit_sqes+0x8610/0x8610 [ 1037.529685] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1037.530255] ? wait_for_completion_io+0x270/0x270 [ 1037.530827] ? rcu_read_lock_any_held+0x75/0xa0 [ 1037.531377] ? vfs_write+0x354/0xb10 [ 1037.531815] ? fput_many+0x2f/0x1a0 [ 1037.532248] ? ksys_write+0x1a9/0x260 [ 1037.532704] ? __ia32_sys_read+0xb0/0xb0 [ 1037.533185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.533812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.534419] do_syscall_64+0x33/0x40 [ 1037.534858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.535464] RIP: 0033:0x7f7d176d5b19 [ 1037.535903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.538082] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1037.538982] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1037.539823] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1037.540663] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.541507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.542347] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:45:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:45:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1037.552517] 9pnet: Insufficient options for proto=fd 02:45:54 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1037.573657] FAULT_INJECTION: forcing a failure. [ 1037.573657] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.575205] CPU: 0 PID: 15569 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1037.576014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.576982] Call Trace: [ 1037.577304] dump_stack+0x107/0x167 [ 1037.577747] should_fail.cold+0x5/0xa [ 1037.578202] ? create_object.isra.0+0x3a/0xa20 [ 1037.578744] should_failslab+0x5/0x20 [ 1037.579188] kmem_cache_alloc+0x5b/0x310 [ 1037.579661] ? mark_held_locks+0x9e/0xe0 [ 1037.580126] create_object.isra.0+0x3a/0xa20 [ 1037.580630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1037.581212] kmem_cache_alloc_bulk+0x168/0x320 [ 1037.581748] io_submit_sqes+0x6fe6/0x8610 [ 1037.582240] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.582813] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.583366] ? find_held_lock+0x2c/0x110 [ 1037.583835] ? io_submit_sqes+0x8610/0x8610 [ 1037.584340] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1037.584894] ? wait_for_completion_io+0x270/0x270 [ 1037.585452] ? rcu_read_lock_any_held+0x75/0xa0 [ 1037.585990] ? vfs_write+0x354/0xb10 [ 1037.586424] ? fput_many+0x2f/0x1a0 [ 1037.586843] ? ksys_write+0x1a9/0x260 [ 1037.587285] ? __ia32_sys_read+0xb0/0xb0 [ 1037.587758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.588364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.588958] do_syscall_64+0x33/0x40 [ 1037.589384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.589982] RIP: 0033:0x7f7089daab19 [ 1037.590412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.592518] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1037.593393] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1037.594219] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1037.595035] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.595852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.596676] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1037.612397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.619424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.623805] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 02:45:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1037.655392] 9pnet: Insufficient options for proto=fd [ 1037.675555] 9pnet: Insufficient options for proto=fd 02:45:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1037.712703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.723533] 9pnet: Insufficient options for proto=fd 02:45:54 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 1037.730192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.746967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.752686] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.792362] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.793857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=15486 comm=syz-executor.4 [ 1037.834875] 9pnet: Insufficient options for proto=fd [ 1037.856260] FAULT_INJECTION: forcing a failure. [ 1037.856260] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.858961] CPU: 1 PID: 15625 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1037.860607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.862555] Call Trace: [ 1037.863132] dump_stack+0x107/0x167 [ 1037.863922] should_fail.cold+0x5/0xa [ 1037.864753] ? create_object.isra.0+0x3a/0xa20 [ 1037.865759] should_failslab+0x5/0x20 [ 1037.866590] kmem_cache_alloc+0x5b/0x310 [ 1037.867478] create_object.isra.0+0x3a/0xa20 [ 1037.868433] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1037.869559] kmem_cache_alloc_bulk+0x168/0x320 [ 1037.870558] io_submit_sqes+0x6fe6/0x8610 [ 1037.871492] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.872631] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1037.873752] ? find_held_lock+0x2c/0x110 [ 1037.874640] ? io_submit_sqes+0x8610/0x8610 [ 1037.875591] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1037.876648] ? wait_for_completion_io+0x270/0x270 [ 1037.877708] ? rcu_read_lock_any_held+0x75/0xa0 [ 1037.878717] ? vfs_write+0x354/0xb10 [ 1037.879532] ? fput_many+0x2f/0x1a0 [ 1037.880332] ? ksys_write+0x1a9/0x260 [ 1037.881159] ? __ia32_sys_read+0xb0/0xb0 [ 1037.882055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.883367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.884617] do_syscall_64+0x33/0x40 [ 1037.885434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.886561] RIP: 0033:0x7f7d176d5b19 [ 1037.887371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.891399] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1037.893058] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1037.894632] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1037.896189] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.897757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.899317] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:46:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:46:07 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000008001f00000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c6530001235d6fc0ac5f41d1114d9edd1fa3db567ca6bbb3c3f0aeda1d83e880ebf01e9ba1b23e4622d9ecd17d63c8de10000d8d9384e08e237f45a7725f42032c4b9d9ce08cb10bf6cfe71fa07"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r2]) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = fork() ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x100000001, 0x8) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) pipe2(&(0x7f0000000040), 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r7, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 02:46:07 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380), 0x0, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:46:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:46:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:46:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:07 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x0) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1050.527786] FAULT_INJECTION: forcing a failure. [ 1050.527786] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.530638] CPU: 1 PID: 15638 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1050.532209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1050.534097] Call Trace: [ 1050.534696] dump_stack+0x107/0x167 [ 1050.535518] should_fail.cold+0x5/0xa [ 1050.536380] ? create_object.isra.0+0x3a/0xa20 [ 1050.537412] should_failslab+0x5/0x20 [ 1050.538280] kmem_cache_alloc+0x5b/0x310 [ 1050.539200] ? mark_held_locks+0x9e/0xe0 [ 1050.540120] create_object.isra.0+0x3a/0xa20 [ 1050.541108] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1050.542263] kmem_cache_alloc_bulk+0x168/0x320 [ 1050.543309] io_submit_sqes+0x6fe6/0x8610 [ 1050.544275] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1050.545409] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1050.546510] ? find_held_lock+0x2c/0x110 [ 1050.547437] ? io_submit_sqes+0x8610/0x8610 [ 1050.548426] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1050.549516] ? wait_for_completion_io+0x270/0x270 [ 1050.550616] ? rcu_read_lock_any_held+0x75/0xa0 [ 1050.551665] ? vfs_write+0x354/0xb10 [ 1050.552223] selinux_netlink_send: 38 callbacks suppressed [ 1050.552237] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.552514] ? fput_many+0x2f/0x1a0 [ 1050.556925] ? ksys_write+0x1a9/0x260 [ 1050.557805] ? __ia32_sys_read+0xb0/0xb0 [ 1050.558756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1050.559966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1050.561160] do_syscall_64+0x33/0x40 [ 1050.562029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1050.563211] RIP: 0033:0x7f7089daab19 [ 1050.564072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1050.568346] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1050.570115] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1050.571768] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1050.573428] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.575086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1050.575695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.576730] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1050.593814] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.608415] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.636845] FAULT_INJECTION: forcing a failure. [ 1050.636845] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.639751] CPU: 1 PID: 15651 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1050.641357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1050.643294] Call Trace: [ 1050.643908] dump_stack+0x107/0x167 [ 1050.644752] should_fail.cold+0x5/0xa [ 1050.645644] ? create_object.isra.0+0x3a/0xa20 [ 1050.646716] should_failslab+0x5/0x20 [ 1050.647596] kmem_cache_alloc+0x5b/0x310 [ 1050.648535] ? mark_held_locks+0x9e/0xe0 [ 1050.649480] create_object.isra.0+0x3a/0xa20 [ 1050.650502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1050.651681] kmem_cache_alloc_bulk+0x168/0x320 [ 1050.652745] io_submit_sqes+0x6fe6/0x8610 [ 1050.653739] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1050.654912] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1050.656036] ? find_held_lock+0x2c/0x110 [ 1050.656983] ? io_submit_sqes+0x8610/0x8610 [ 1050.658001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1050.659122] ? wait_for_completion_io+0x270/0x270 [ 1050.660244] ? rcu_read_lock_any_held+0x75/0xa0 [ 1050.661316] ? vfs_write+0x354/0xb10 [ 1050.662185] ? fput_many+0x2f/0x1a0 [ 1050.663029] ? ksys_write+0x1a9/0x260 [ 1050.663909] ? __ia32_sys_read+0xb0/0xb0 [ 1050.664853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1050.666073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1050.667268] do_syscall_64+0x33/0x40 [ 1050.668129] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1050.669315] RIP: 0033:0x7f7d176d5b19 [ 1050.670185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1050.674455] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1050.676213] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1050.677865] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1050.679531] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.681180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1050.682841] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:46:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1050.722873] FAULT_INJECTION: forcing a failure. [ 1050.722873] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.724624] CPU: 0 PID: 15864 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1050.725619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1050.726810] Call Trace: [ 1050.727192] dump_stack+0x107/0x167 [ 1050.727712] should_fail.cold+0x5/0xa [ 1050.728256] ? create_object.isra.0+0x3a/0xa20 [ 1050.728909] should_failslab+0x5/0x20 [ 1050.729456] kmem_cache_alloc+0x5b/0x310 [ 1050.730050] ? mark_held_locks+0x9e/0xe0 [ 1050.730636] create_object.isra.0+0x3a/0xa20 [ 1050.731263] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1050.731996] kmem_cache_alloc_bulk+0x168/0x320 [ 1050.732658] io_submit_sqes+0x6fe6/0x8610 [ 1050.733282] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1050.734000] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1050.734688] ? find_held_lock+0x2c/0x110 [ 1050.735272] ? io_submit_sqes+0x8610/0x8610 [ 1050.735896] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1050.736583] ? wait_for_completion_io+0x270/0x270 [ 1050.737277] ? rcu_read_lock_any_held+0x75/0xa0 [ 1050.737947] ? vfs_write+0x354/0xb10 [ 1050.738478] ? fput_many+0x2f/0x1a0 [ 1050.739000] ? ksys_write+0x1a9/0x260 [ 1050.739545] ? __ia32_sys_read+0xb0/0xb0 [ 1050.740131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1050.740878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1050.741613] do_syscall_64+0x33/0x40 [ 1050.742155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1050.742889] RIP: 0033:0x7f7089daab19 [ 1050.743425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1050.746052] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1050.747138] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1050.748157] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1050.749160] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1050.750196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1050.751213] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 02:46:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380), 0x0, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:46:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x0) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1050.782716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.797563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.820674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.828048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.874876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1050.877855] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=15645 comm=syz-executor.4 [ 1066.194754] FAULT_INJECTION: forcing a failure. [ 1066.194754] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.197113] CPU: 0 PID: 16181 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1066.198285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.199710] Call Trace: [ 1066.200163] dump_stack+0x107/0x167 [ 1066.200779] should_fail.cold+0x5/0xa [ 1066.201424] ? create_object.isra.0+0x3a/0xa20 [ 1066.202193] should_failslab+0x5/0x20 [ 1066.202846] kmem_cache_alloc+0x5b/0x310 [ 1066.203529] ? mark_held_locks+0x9e/0xe0 [ 1066.204222] create_object.isra.0+0x3a/0xa20 [ 1066.204954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1066.205817] kmem_cache_alloc_bulk+0x168/0x320 [ 1066.206603] io_submit_sqes+0x6fe6/0x8610 [ 1066.207318] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.208163] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.208973] ? find_held_lock+0x2c/0x110 [ 1066.209657] ? io_submit_sqes+0x8610/0x8610 [ 1066.210402] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1066.211226] ? wait_for_completion_io+0x270/0x270 [ 1066.212042] ? rcu_read_lock_any_held+0x75/0xa0 [ 1066.212821] ? vfs_write+0x354/0xb10 [ 1066.213452] ? fput_many+0x2f/0x1a0 [ 1066.214059] ? ksys_write+0x1a9/0x260 [ 1066.214905] ? __ia32_sys_read+0xb0/0xb0 [ 1066.215630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.216511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.217374] do_syscall_64+0x33/0x40 [ 1066.217992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.218859] RIP: 0033:0x7f7089daab19 [ 1066.219487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.222567] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1066.223833] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1066.225018] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1066.226202] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1066.227395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.228589] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1066.229780] FAULT_INJECTION: forcing a failure. [ 1066.229780] name failslab, interval 1, probability 0, space 0, times 0 02:46:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:46:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380), 0x0, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:46:22 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x2010, r0, 0x92615000) 02:46:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:22 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:46:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:46:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1066.231632] CPU: 1 PID: 16192 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1066.233598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.235603] Call Trace: [ 1066.236259] dump_stack+0x107/0x167 [ 1066.237143] should_fail.cold+0x5/0xa [ 1066.238069] ? create_object.isra.0+0x3a/0xa20 [ 1066.239186] should_failslab+0x5/0x20 [ 1066.240262] kmem_cache_alloc+0x5b/0x310 [ 1066.241248] ? mark_held_locks+0x9e/0xe0 [ 1066.242230] create_object.isra.0+0x3a/0xa20 [ 1066.243296] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1066.244525] kmem_cache_alloc_bulk+0x168/0x320 [ 1066.245629] io_submit_sqes+0x6fe6/0x8610 [ 1066.246680] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.247879] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.249046] ? find_held_lock+0x2c/0x110 [ 1066.250022] ? io_submit_sqes+0x8610/0x8610 [ 1066.251068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1066.252218] ? wait_for_completion_io+0x270/0x270 [ 1066.253375] ? rcu_read_lock_any_held+0x75/0xa0 [ 1066.254487] ? vfs_write+0x354/0xb10 [ 1066.255378] ? fput_many+0x2f/0x1a0 [ 1066.256243] ? ksys_write+0x1a9/0x260 [ 1066.257161] ? __ia32_sys_read+0xb0/0xb0 [ 1066.258142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.259389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.260616] do_syscall_64+0x33/0x40 [ 1066.261513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.262740] RIP: 0033:0x7f7d176d5b19 [ 1066.263598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.267932] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1066.269718] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1066.271383] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1066.273067] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1066.274773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.276827] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:46:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee723", 0x36, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 1066.341460] 9pnet: Insufficient options for proto=fd 02:46:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0x1}, {0x7, 0x0, 0x4, 0x1}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 02:46:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1066.422315] 9pnet: Insufficient options for proto=fd 02:46:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1066.455493] selinux_netlink_send: 38 callbacks suppressed [ 1066.455514] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 02:46:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:46:23 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xfffffffffffffec8) fchmod(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="2800000010000100000000b5cfc06839a6c37d02c7783a2f000000000000000005000000", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x8082, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) [ 1066.556220] FAULT_INJECTION: forcing a failure. [ 1066.556220] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.558823] CPU: 1 PID: 16473 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1066.560279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.562012] Call Trace: [ 1066.562578] dump_stack+0x107/0x167 [ 1066.563349] should_fail.cold+0x5/0xa [ 1066.563795] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.564152] ? create_object.isra.0+0x3a/0xa20 [ 1066.564183] should_failslab+0x5/0x20 [ 1066.567576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.567679] kmem_cache_alloc+0x5b/0x310 [ 1066.570236] create_object.isra.0+0x3a/0xa20 [ 1066.570764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.571160] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1066.571193] kmem_cache_alloc_bulk+0x168/0x320 [ 1066.574882] io_submit_sqes+0x6fe6/0x8610 [ 1066.575783] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.576827] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.577847] ? find_held_lock+0x2c/0x110 [ 1066.578749] ? io_submit_sqes+0x8610/0x8610 [ 1066.579665] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1066.580717] ? wait_for_completion_io+0x270/0x270 [ 1066.581766] ? rcu_read_lock_any_held+0x75/0xa0 [ 1066.582781] ? vfs_write+0x354/0xb10 [ 1066.583588] ? fput_many+0x2f/0x1a0 [ 1066.584379] ? ksys_write+0x1a9/0x260 [ 1066.585208] ? __ia32_sys_read+0xb0/0xb0 [ 1066.586095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.587241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.588366] do_syscall_64+0x33/0x40 [ 1066.589174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.590288] RIP: 0033:0x7f7089daab19 [ 1066.591103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.595113] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1066.596768] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1066.598319] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1066.599876] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1066.601424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.602985] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1066.604592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.609938] 9pnet: Insufficient options for proto=fd [ 1066.627520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.650641] FAULT_INJECTION: forcing a failure. [ 1066.650641] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.652542] CPU: 0 PID: 16546 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1066.653560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1066.654782] Call Trace: [ 1066.655176] dump_stack+0x107/0x167 [ 1066.655721] should_fail.cold+0x5/0xa [ 1066.656287] ? create_object.isra.0+0x3a/0xa20 [ 1066.656971] should_failslab+0x5/0x20 [ 1066.657186] 9pnet: Insufficient options for proto=fd [ 1066.657529] kmem_cache_alloc+0x5b/0x310 [ 1066.657545] ? mark_held_locks+0x9e/0xe0 [ 1066.657565] create_object.isra.0+0x3a/0xa20 [ 1066.660417] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1066.661149] kmem_cache_alloc_bulk+0x168/0x320 [ 1066.661813] io_submit_sqes+0x6fe6/0x8610 [ 1066.662425] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.663140] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1066.663833] ? find_held_lock+0x2c/0x110 [ 1066.664425] ? io_submit_sqes+0x8610/0x8610 [ 1066.665051] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1066.665741] ? wait_for_completion_io+0x270/0x270 [ 1066.666441] ? rcu_read_lock_any_held+0x75/0xa0 [ 1066.667104] ? vfs_write+0x354/0xb10 [ 1066.667636] ? fput_many+0x2f/0x1a0 [ 1066.668156] ? ksys_write+0x1a9/0x260 [ 1066.668697] ? __ia32_sys_read+0xb0/0xb0 [ 1066.669283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1066.670033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1066.670779] do_syscall_64+0x33/0x40 [ 1066.671309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1066.672037] RIP: 0033:0x7f7d176d5b19 [ 1066.672574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1066.675187] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1066.676271] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1066.677285] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1066.678302] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1066.679327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.680343] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1066.696262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.703761] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.740205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 [ 1066.741788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=16200 comm=syz-executor.4 02:46:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:46:38 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:46:38 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:46:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:38 executing program 1: r0 = dup(0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0x4, 0x6, 0x11b, 0x6c, 0xff, 0x7, 0x8}, "ef04a77a13b2c256033de7fbe1e7e24b308d8d066fb93f5923b39b4ee9da29ebad7685958002543d4ea7ea73b5c09c3b58d5d123da0c4b8a9203e30c0cbd11d96cbfd68d368189691906b828db168d71828a224a4a09bf5823375a6f11a15296f8b0eecc13f8be90b5b494b4c003b99696fbf3b9a1b769a3d353a1da4928985e5e7ca001d5397e075030658719aecc9d1f5e5d504ea24da8a1fab4c1ed4e5f4d8557bf0614b1d2ba1324d61fb141d438ee0be08d584be7375279d1a67437b3ddb9a1769a667c2220ebd715419a7ad17186960056950dff", ['\x00']}, 0x1f7) r1 = syz_open_dev$loop(&(0x7f0000000200), 0xa6d, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x4, 0x7f, 0x4, 0x10001}) r2 = fcntl$getown(r0, 0x9) recvmmsg$unix(r0, &(0x7f0000002dc0)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001d80)=[{&(0x7f00000016c0)=""/153, 0x99}, {&(0x7f0000001780)=""/234, 0xea}, {&(0x7f0000001880)=""/202, 0xca}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/17, 0x11}, {&(0x7f0000001ac0)=""/250, 0xfa}, {&(0x7f0000001bc0)=""/192, 0xc0}, {&(0x7f0000001c80)=""/118, 0x76}, {&(0x7f0000001d00)=""/109, 0x6d}], 0x9, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f40)=""/64, 0x40}, {&(0x7f0000001f80)=""/244, 0xf4}], 0x2, &(0x7f00000020c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f00000021c0)=""/253, 0xfd}, {&(0x7f00000022c0)=""/1, 0x1}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/26, 0x1a}, {&(0x7f0000002440)=""/141, 0x8d}, {&(0x7f0000002500)=""/16, 0x10}, {&(0x7f0000002540)=""/236, 0xec}], 0x7, &(0x7f00000026c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002800)=[{&(0x7f0000002780)=""/113, 0x71}], 0x1}}, {{&(0x7f0000002840), 0x6e, &(0x7f0000002d40)=[{&(0x7f00000028c0)=""/198, 0xc6}, {&(0x7f00000029c0)}, {&(0x7f0000002a00)=""/185, 0xb9}, {&(0x7f0000002ac0)=""/114, 0x72}, {&(0x7f0000002b40)=""/155, 0x9b}, {&(0x7f0000002c00)=""/108, 0x6c}, {&(0x7f0000002c80)=""/88, 0x58}, {&(0x7f0000002d00)=""/16, 0x10}], 0x8}}], 0x5, 0x63, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002f00)=0x0) clone3(&(0x7f0000002f80)={0x10800000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0xe}, &(0x7f0000000340)=""/253, 0xfd, &(0x7f0000000440)=""/205, &(0x7f0000002f40)=[0xffffffffffffffff, r2, r3, r9], 0x4, {r0}}, 0x58) fstatfs(0xffffffffffffffff, &(0x7f0000003000)=""/4096) io_submit(0x0, 0x1, &(0x7f0000004080)=[&(0x7f0000004040)={0x0, 0x0, 0x0, 0x1, 0x4, r8, &(0x7f0000004000)="64a3b5469dcbbc9f409d56258f0ac56b1b69395a8bdd8e9782086146988d1089f4bed45e1f4f67d8244fe4997e9dc357e0bb01963eb4c54c430db3", 0x3b, 0x8, 0x0, 0x0, r4}]) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000004280)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004240)={&(0x7f0000004100)={0x108, 0x4, 0x8, 0x204, 0x0, 0x0, {0xdab6ac7e3d29822f, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffff261}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6330e4f7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4000000}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xf4b6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7e3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x74}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x72ee9ef3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) lseek(r10, 0x0, 0x2) r11 = dup(r6) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000042c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc0189379, &(0x7f0000004300)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) link(&(0x7f0000004340)='./file0\x00', &(0x7f0000004380)='./file0\x00') syz_open_dev$vcsu(&(0x7f00000043c0), 0x1000, 0x19201) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r11) 02:46:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee723", 0x36, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:46:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 1081.713699] FAULT_INJECTION: forcing a failure. [ 1081.713699] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.715354] CPU: 1 PID: 16640 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1081.715738] FAULT_INJECTION: forcing a failure. [ 1081.715738] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.716315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.716321] Call Trace: [ 1081.716340] dump_stack+0x107/0x167 [ 1081.716360] should_fail.cold+0x5/0xa [ 1081.720651] ? create_object.isra.0+0x3a/0xa20 [ 1081.721300] should_failslab+0x5/0x20 [ 1081.721827] kmem_cache_alloc+0x5b/0x310 [ 1081.722397] ? mark_held_locks+0x9e/0xe0 [ 1081.722964] create_object.isra.0+0x3a/0xa20 [ 1081.723575] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1081.724287] kmem_cache_alloc_bulk+0x168/0x320 [ 1081.724924] io_submit_sqes+0x6fe6/0x8610 [ 1081.725521] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1081.726218] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1081.726894] ? find_held_lock+0x2c/0x110 [ 1081.727469] ? io_submit_sqes+0x8610/0x8610 [ 1081.728084] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1081.728761] ? wait_for_completion_io+0x270/0x270 [ 1081.729438] ? rcu_read_lock_any_held+0x75/0xa0 [ 1081.730084] ? vfs_write+0x354/0xb10 [ 1081.730612] ? fput_many+0x2f/0x1a0 [ 1081.731139] ? ksys_write+0x1a9/0x260 [ 1081.731676] ? __ia32_sys_read+0xb0/0xb0 [ 1081.732245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1081.732978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1081.733705] do_syscall_64+0x33/0x40 [ 1081.734232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.734949] RIP: 0033:0x7f7d176d5b19 [ 1081.735471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.738056] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1081.739128] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1081.740130] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1081.741117] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.742115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.743124] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1081.744138] CPU: 0 PID: 16635 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1081.745239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.746541] Call Trace: [ 1081.746970] dump_stack+0x107/0x167 [ 1081.747539] should_fail.cold+0x5/0xa [ 1081.748144] should_failslab+0x5/0x20 [ 1081.748741] kmem_cache_alloc_bulk+0x4b/0x320 [ 1081.749450] io_submit_sqes+0x6fe6/0x8610 [ 1081.750125] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1081.750918] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1081.751680] ? find_held_lock+0x2c/0x110 [ 1081.752320] ? io_submit_sqes+0x8610/0x8610 [ 1081.753006] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1081.753771] ? wait_for_completion_io+0x270/0x270 [ 1081.754535] ? rcu_read_lock_any_held+0x75/0xa0 [ 1081.755273] ? vfs_write+0x354/0xb10 [ 1081.755861] ? fput_many+0x2f/0x1a0 [ 1081.756435] ? ksys_write+0x1a9/0x260 [ 1081.757039] ? __ia32_sys_read+0xb0/0xb0 [ 1081.757682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1081.758511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1081.759332] do_syscall_64+0x33/0x40 [ 1081.759520] 9pnet: Insufficient options for proto=fd [ 1081.759924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.759935] RIP: 0033:0x7f7089daab19 [ 1081.759955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.765122] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1081.766387] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1081.767581] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1081.768758] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.769938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.771138] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1081.808711] 9pnet: Insufficient options for proto=fd 02:46:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee723", 0x36, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:46:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1081.876283] selinux_netlink_send: 38 callbacks suppressed [ 1081.876294] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1081.887952] 9pnet: Insufficient options for proto=fd 02:46:38 executing program 1: mq_open(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000100)) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) link(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00') openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xff, 0xb91, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 02:46:38 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 1081.941620] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 02:46:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0", 0x51, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 1081.963869] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1081.972272] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1081.978390] 9pnet: Insufficient options for proto=fd [ 1082.003665] FAULT_INJECTION: forcing a failure. [ 1082.003665] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.005332] CPU: 1 PID: 16867 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1082.006287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.007474] Call Trace: [ 1082.007845] dump_stack+0x107/0x167 [ 1082.008352] should_fail.cold+0x5/0xa [ 1082.008892] ? create_object.isra.0+0x3a/0xa20 [ 1082.009537] should_failslab+0x5/0x20 [ 1082.010063] kmem_cache_alloc+0x5b/0x310 [ 1082.010636] ? mark_held_locks+0x9e/0xe0 [ 1082.011212] create_object.isra.0+0x3a/0xa20 [ 1082.011830] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.012544] kmem_cache_alloc_bulk+0x168/0x320 [ 1082.013189] io_submit_sqes+0x6fe6/0x8610 [ 1082.013781] ? __mutex_lock+0x4fe/0x10b0 [ 1082.014351] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1082.015057] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1082.015733] ? find_held_lock+0x2c/0x110 [ 1082.016311] ? io_submit_sqes+0x8610/0x8610 [ 1082.016916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1082.017594] ? wait_for_completion_io+0x270/0x270 [ 1082.018271] ? rcu_read_lock_any_held+0x75/0xa0 [ 1082.018930] ? vfs_write+0x354/0xb10 [ 1082.019457] ? fput_many+0x2f/0x1a0 [ 1082.019973] ? ksys_write+0x1a9/0x260 [ 1082.020507] ? __ia32_sys_read+0xb0/0xb0 [ 1082.021081] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.021821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.022547] do_syscall_64+0x33/0x40 [ 1082.023078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.023805] RIP: 0033:0x7f7d176d5b19 [ 1082.024324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.026907] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1082.027970] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1082.028961] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1082.029954] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.030958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.031957] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:46:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:46:38 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:46:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1082.073765] 9pnet: Insufficient options for proto=fd [ 1082.102131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1082.116767] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1082.128847] FAULT_INJECTION: forcing a failure. [ 1082.128847] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.130196] CPU: 1 PID: 16946 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1082.131163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1082.132152] Call Trace: [ 1082.132520] dump_stack+0x107/0x167 [ 1082.133031] should_fail.cold+0x5/0xa [ 1082.133565] ? create_object.isra.0+0x3a/0xa20 [ 1082.134200] should_failslab+0x5/0x20 [ 1082.134736] kmem_cache_alloc+0x5b/0x310 [ 1082.135318] create_object.isra.0+0x3a/0xa20 [ 1082.135926] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1082.136639] kmem_cache_alloc_bulk+0x168/0x320 [ 1082.137291] io_submit_sqes+0x6fe6/0x8610 [ 1082.137892] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1082.138589] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1082.139278] ? find_held_lock+0x2c/0x110 [ 1082.139850] ? io_submit_sqes+0x8610/0x8610 [ 1082.140464] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1082.141139] ? wait_for_completion_io+0x270/0x270 [ 1082.141810] ? rcu_read_lock_any_held+0x75/0xa0 [ 1082.142468] ? vfs_write+0x354/0xb10 [ 1082.143002] ? fput_many+0x2f/0x1a0 [ 1082.143510] ? ksys_write+0x1a9/0x260 [ 1082.144044] ? __ia32_sys_read+0xb0/0xb0 [ 1082.144619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1082.145358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1082.146085] do_syscall_64+0x33/0x40 [ 1082.146599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1082.147337] RIP: 0033:0x7f7089daab19 [ 1082.147851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1082.150424] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1082.151486] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1082.152482] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1082.153471] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.154450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.155444] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1082.164200] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1082.171711] 9pnet: Insufficient options for proto=fd [ 1082.179437] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1082.218061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 [ 1082.219813] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=16655 comm=syz-executor.4 02:46:52 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:46:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0", 0x51, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:46:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:46:52 executing program 1: r0 = syz_io_uring_setup(0x1d, &(0x7f00000026c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x193100000000000}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000880)=r6, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000001840)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000017c0)=@ieee802154}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000e79000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x10000000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) io_uring_enter(0xffffffffffffffff, 0x32c4, 0x52e9, 0x3, &(0x7f00000008c0)={[0x1]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x20, 0xffffffff, 0x2, @loopback, @mcast1, 0x80, 0x700, 0x7, 0x4}}) syz_io_uring_submit(r3, r7, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r8, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@can={0x1d, r9}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)="f96f4f25ce3fdaf8751da9cc5cee915a98a53d0d88e2dcafc003154654d6243654bc77d55027797c19a0a13b9a289cb5e263d74bcc5dba3567d968b392046a2eaeb55cbd47f813b011918b2587c1dbb88d561e24f4867821772cef6791fbe315fe5e8fed99419666e14b2b02e90626211c489a5b9b2112007010795deaf765930f2356a21c82a238dca881296de6dfbcf6ef09a2ef652988e765ed0eb94814e533c0b3451a275acf1471cb4682d6b4b89129aea0a1fd8a2891f565516ef623f8abe31305b59aa3c35999326b3572abc3d31f638aaf26089ba2072296c76b69cdbc82", 0xe2}, {&(0x7f0000000400)="ff431ef7fc5af1d8b41855c7087eb8fbc0f00694fbd01e251f428a6800a8b8f557d41fe88800f25e076b8c43e68091bc223ddee797a6e188d7c0cf4824130d80c5135d00eeb8bd6aa7f21a8e9074e3f2b4285d9b6312ed419b118ef72856221c3b538d099225260213399fbd2757919309a40424c1b60cd94e104098d3d228bb5037620616762b7eb6c2dbf7d05698c8044d322f8524948230f264c252a2dde6e09608a07676845cfec01472272a0e4cd29d7f765ee76411e9f54d08f44db466e0693132ef65fe1b2764cdb7867dbd1beb53bd5ba7fdf403cbc857765a40ce6bbe949c2764e8034cfd6dca228a36520c3263086a", 0xf4}, {&(0x7f0000000500)="4d0cc4d40ca4a7ddb52378e2c8ba1c3290812118a63795100c36ac15d1a27b2ed65c023b02b01cb706da87521d1c42720c14f118fd7a38e73af2243701a6115850152a512e84499fbf5f8a4095e94fd52503a426d205a9", 0x57}, {&(0x7f0000000580)="0748207a64c1ca4de2208bab800ca7de0c3dc5d2610716b421fc986ce2d991f745a8236f5964fb2cf6330e0d4c26d16e011a21cd8d12fb6ba9a8e5d5e05a0b97fff8661c5dca01a2ec16986ea5a7c0418167d2d0c1bebc1ee6d5c89a9d6f3aa116fee2082a0989c62d6fcacfe571065f83af1001846e26eda182a42619413bde02e05e2156f7f9fe3d632b467416feb152340986a9e6fb2aede4a010b5dbef7dbf05aca0c1d2fab2907dee782c52d4ae6a40b1eb410b3d2cc9bbc416479742", 0xbf}, {&(0x7f0000000640)="48b5c8d57aa56754d9597cb0386605c1879de8fe058b149465b151beb490021847826db1692f0d9cfb1180ed81deb57ed0331246cafbd8fe70920ef8c5c8fb2c48b87f17418fd161a9c8599dce7fddff457b6c3c75e3a2aa2809647bcd98e4", 0x5f}, {&(0x7f00000006c0)="f18727583e8afd4024d73065172d312461b76c66b839198f9e09480e4ce9b2c8af16eabb3bf1cdf9e261201ef400e61fd9c872f4bd7ba70c52975be89e1dcae4bd025aceadddfd1ebcbaab8e2e1f90072e2c1dc366eb962160797aab63a770c60e5ebd372d3a55764fd491734109f7d44dd5adbcda343382df3c1b4ce381ba2d1b2b17ee8fb03743ee9cbc85855f7c23251dd1bbc603", 0x96}], 0x6, &(0x7f0000002740)=[{0x108, 0x103, 0x2, "327ad1af11cbad77ac10de4eaeb3e4fddf721edb5616979b8b2460688591eccacee38aeea57fbc7d492d2a7d3085baaed7fa2f2632638c1fe5e620966e8a60538fd0e5a3186fc41c3daac4e765eb109863a777983ed865d37a94aea2c0aa4299781fa55a45c16a5555ea02bd7c08fe9c18703c0535275fca559c18d4427cb1cc97b8e7bd622e5e69d24fe2d3019dd4198fe20df777c81e202867147a4be0a415541448272719f976682664f02cecd4b67ccb4549e0f84db2f136518ee96c2a5913f774f8e34731e77cc58474fed909c966df131036d15a6b916ca825559f4e789ad272a2d92aa07e9cb3b6517bebd84afec3574ad4"}, {0x1010, 0x111, 0xfffffffb, "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"}, {0x1010, 0x104, 0x4, "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"}, {0x10, 0x104, 0x8}, {0x88, 0xe35fd9edb26fe0b4, 0x400, "2ea155d30fc159e4678f9d96ddd1be83c8c350807bf72a765329788f35f50c9d30f21210f4ec82127f13d31020abf1fc668b8c8da5ee2008f6ceb7b32e27685622ab2efb8ee593cbb89133216d91bbe4262a63326b6611a6aeb654018a9f695bd2dad33e34daf31392fff27a57e42ba5b9"}], 0x21c0}, 0x0, 0x4814, 0x1}, 0x3ff) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) 02:46:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:46:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0xffffffffffffffff, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1095.727996] FAULT_INJECTION: forcing a failure. [ 1095.727996] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.730980] CPU: 0 PID: 17093 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1095.732483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.734268] Call Trace: [ 1095.734840] dump_stack+0x107/0x167 [ 1095.735635] should_fail.cold+0x5/0xa [ 1095.736456] ? create_object.isra.0+0x3a/0xa20 [ 1095.737444] should_failslab+0x5/0x20 [ 1095.738264] kmem_cache_alloc+0x5b/0x310 [ 1095.739137] ? create_object.isra.0+0x3ad/0xa20 [ 1095.740151] create_object.isra.0+0x3a/0xa20 [ 1095.741094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1095.742191] __kmalloc_node+0x1ae/0x420 [ 1095.743058] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1095.744169] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1095.745245] ? trace_hardirqs_on+0x5b/0x180 [ 1095.746177] kmem_cache_alloc_bulk+0x182/0x320 [ 1095.747169] io_submit_sqes+0x6fe6/0x8610 [ 1095.748099] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1095.749170] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1095.750208] ? find_held_lock+0x2c/0x110 [ 1095.751089] ? io_submit_sqes+0x8610/0x8610 [ 1095.752036] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1095.753078] ? wait_for_completion_io+0x270/0x270 [ 1095.754120] ? rcu_read_lock_any_held+0x75/0xa0 [ 1095.755122] ? vfs_write+0x354/0xb10 [ 1095.755923] ? fput_many+0x2f/0x1a0 [ 1095.756707] ? ksys_write+0x1a9/0x260 [ 1095.757524] ? __ia32_sys_read+0xb0/0xb0 [ 1095.758400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1095.759534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.760648] do_syscall_64+0x33/0x40 [ 1095.761450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.762553] RIP: 0033:0x7f7089daab19 [ 1095.763367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.767326] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1095.768962] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1095.770481] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1095.772000] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.773528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.775046] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1095.782633] FAULT_INJECTION: forcing a failure. [ 1095.782633] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.784052] CPU: 1 PID: 17113 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1095.784884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.785877] Call Trace: [ 1095.786196] dump_stack+0x107/0x167 [ 1095.786632] should_fail.cold+0x5/0xa [ 1095.787097] ? create_object.isra.0+0x3a/0xa20 [ 1095.787657] should_failslab+0x5/0x20 [ 1095.788118] kmem_cache_alloc+0x5b/0x310 [ 1095.788608] ? mark_held_locks+0x9e/0xe0 [ 1095.789102] create_object.isra.0+0x3a/0xa20 [ 1095.789631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1095.790246] kmem_cache_alloc_bulk+0x168/0x320 [ 1095.790799] io_submit_sqes+0x6fe6/0x8610 [ 1095.791311] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1095.791908] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1095.792491] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1095.793030] ? _raw_spin_unlock_irq+0x27/0x30 [ 1095.793563] ? io_submit_sqes+0x8610/0x8610 [ 1095.794086] ? finish_task_switch+0x126/0x5d0 [ 1095.794613] ? finish_task_switch+0xef/0x5d0 [ 1095.795134] ? __switch_to+0x572/0xf70 [ 1095.795602] ? __switch_to_asm+0x3a/0x60 [ 1095.796082] ? __switch_to_asm+0x34/0x60 [ 1095.796566] ? __schedule+0x82c/0x1ea0 [ 1095.797044] ? io_schedule_timeout+0x140/0x140 [ 1095.797593] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1095.798146] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1095.798780] ? ksys_write+0x1a9/0x260 [ 1095.799235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1095.799869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.800488] do_syscall_64+0x33/0x40 [ 1095.800928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1095.801545] RIP: 0033:0x7f7d176d5b19 [ 1095.801981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.804174] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1095.805083] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1095.805935] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1095.806782] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.807643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1095.808503] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1095.820531] 9pnet: Insufficient options for proto=fd 02:46:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0xffffffffffffffff, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:46:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0", 0x51, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:46:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:46:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1095.940382] selinux_netlink_send: 38 callbacks suppressed [ 1095.940401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 02:46:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:46:52 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = fork() ptrace(0x10, r0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$cont(0x18, r1, 0x100000001, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) dup(0xffffffffffffffff) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000500)='ns/mnt\x00') ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000100)) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x90000003}) [ 1095.985756] FAULT_INJECTION: forcing a failure. [ 1095.985756] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.987207] CPU: 1 PID: 17446 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1095.987991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.988935] Call Trace: [ 1095.989247] dump_stack+0x107/0x167 [ 1095.989652] should_fail.cold+0x5/0xa [ 1095.990079] ? create_object.isra.0+0x3a/0xa20 [ 1095.990588] should_failslab+0x5/0x20 [ 1095.991016] kmem_cache_alloc+0x5b/0x310 [ 1095.991487] ? mark_held_locks+0x9e/0xe0 [ 1095.991942] create_object.isra.0+0x3a/0xa20 [ 1095.992458] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1095.993027] kmem_cache_alloc_bulk+0x168/0x320 [ 1095.993546] io_submit_sqes+0x6fe6/0x8610 [ 1095.994034] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1095.994598] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1095.995159] ? find_held_lock+0x2c/0x110 [ 1095.995628] ? io_submit_sqes+0x8610/0x8610 [ 1095.996118] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1095.996657] ? wait_for_completion_io+0x270/0x270 [ 1095.997210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1095.997731] ? vfs_write+0x354/0xb10 [ 1095.998154] ? fput_many+0x2f/0x1a0 [ 1095.998561] ? ksys_write+0x1a9/0x260 [ 1095.998986] ? __ia32_sys_read+0xb0/0xb0 [ 1095.999459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.000048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.000632] do_syscall_64+0x33/0x40 [ 1096.001050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.001623] RIP: 0033:0x7f7089daab19 [ 1096.002043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.004136] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1096.004996] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1096.005817] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1096.006632] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.007442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.008252] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 02:46:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:46:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3a", 0x5e, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 1096.021252] 9pnet: Insufficient options for proto=fd [ 1096.038184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.054794] 9pnet: Insufficient options for proto=fd [ 1096.064747] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.078741] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.102695] FAULT_INJECTION: forcing a failure. [ 1096.102695] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.104271] CPU: 1 PID: 17534 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1096.105078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.106033] Call Trace: [ 1096.106352] dump_stack+0x107/0x167 [ 1096.106799] should_fail.cold+0x5/0xa [ 1096.107265] ? create_object.isra.0+0x3a/0xa20 [ 1096.107827] should_failslab+0x5/0x20 [ 1096.108264] kmem_cache_alloc+0x5b/0x310 [ 1096.108749] ? mark_held_locks+0x9e/0xe0 [ 1096.109218] create_object.isra.0+0x3a/0xa20 [ 1096.109716] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1096.110295] kmem_cache_alloc_bulk+0x168/0x320 [ 1096.110825] io_submit_sqes+0x6fe6/0x8610 [ 1096.111312] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1096.111987] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1096.112544] ? find_held_lock+0x2c/0x110 [ 1096.113005] ? io_submit_sqes+0x8610/0x8610 [ 1096.113496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1096.114048] ? wait_for_completion_io+0x270/0x270 [ 1096.114593] ? rcu_read_lock_any_held+0x75/0xa0 [ 1096.115125] ? vfs_write+0x354/0xb10 [ 1096.115571] ? fput_many+0x2f/0x1a0 [ 1096.115981] ? ksys_write+0x1a9/0x260 [ 1096.116412] ? __ia32_sys_read+0xb0/0xb0 [ 1096.116885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.117478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.118076] do_syscall_64+0x33/0x40 [ 1096.118495] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1096.119077] RIP: 0033:0x7f7d176d5b19 [ 1096.119518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.121589] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1096.122446] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1096.123242] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1096.124053] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.124863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.125665] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1096.259927] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.271859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.286923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.292315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.322318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 [ 1096.325330] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=17092 comm=syz-executor.4 02:47:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:47:07 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0xffffffffffffffff, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:47:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3a", 0x5e, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:07 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:07 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:47:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x420, 0xc01d, 0x0, 0x0, 0x0, 0x40003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/nf_conntrack_ftp', 0x244001, 0x41) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) sendfile(r0, r2, 0x0, 0x20d315) [ 1111.423317] FAULT_INJECTION: forcing a failure. [ 1111.423317] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.426278] CPU: 0 PID: 17653 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1111.427925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.429704] Call Trace: [ 1111.430272] dump_stack+0x107/0x167 [ 1111.431055] should_fail.cold+0x5/0xa [ 1111.431887] should_failslab+0x5/0x20 [ 1111.432706] kmem_cache_alloc_bulk+0x4b/0x320 [ 1111.433669] io_submit_sqes+0x6fe6/0x8610 [ 1111.434586] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1111.435653] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1111.436695] ? find_held_lock+0x2c/0x110 [ 1111.437563] ? io_submit_sqes+0x8610/0x8610 [ 1111.438496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1111.439530] ? wait_for_completion_io+0x270/0x270 [ 1111.440574] ? rcu_read_lock_any_held+0x75/0xa0 [ 1111.441570] ? vfs_write+0x354/0xb10 [ 1111.442364] ? fput_many+0x2f/0x1a0 [ 1111.443152] ? ksys_write+0x1a9/0x260 [ 1111.443971] ? __ia32_sys_read+0xb0/0xb0 [ 1111.444836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.445456] FAULT_INJECTION: forcing a failure. [ 1111.445456] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.445943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.445975] do_syscall_64+0x33/0x40 [ 1111.450486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.451582] RIP: 0033:0x7f7d176d5b19 [ 1111.452381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.456295] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1111.457956] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1111.459521] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1111.461095] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.462652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1111.464225] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1111.465819] CPU: 1 PID: 17658 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1111.467556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.469606] Call Trace: [ 1111.470261] dump_stack+0x107/0x167 [ 1111.471155] should_fail.cold+0x5/0xa [ 1111.472100] ? create_object.isra.0+0x3a/0xa20 [ 1111.473224] should_failslab+0x5/0x20 [ 1111.474151] kmem_cache_alloc+0x5b/0x310 [ 1111.475137] ? mark_held_locks+0x9e/0xe0 [ 1111.476128] create_object.isra.0+0x3a/0xa20 [ 1111.477190] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1111.478431] kmem_cache_alloc_bulk+0x168/0x320 [ 1111.479519] io_submit_sqes+0x6fe6/0x8610 [ 1111.480572] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1111.481775] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1111.482948] ? find_held_lock+0x2c/0x110 [ 1111.483950] ? io_submit_sqes+0x8610/0x8610 [ 1111.485005] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1111.486181] ? wait_for_completion_io+0x270/0x270 [ 1111.487345] ? rcu_read_lock_any_held+0x75/0xa0 [ 1111.488483] ? vfs_write+0x354/0xb10 [ 1111.489383] ? fput_many+0x2f/0x1a0 [ 1111.490243] ? ksys_write+0x1a9/0x260 [ 1111.491164] ? __ia32_sys_read+0xb0/0xb0 [ 1111.492157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.493425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.494676] do_syscall_64+0x33/0x40 [ 1111.495570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.496807] RIP: 0033:0x7f7089daab19 [ 1111.497691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.502099] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1111.503931] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1111.505633] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1111.507338] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.509055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1111.510761] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1111.543741] 9pnet: Insufficient options for proto=fd 02:47:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3a", 0x5e, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 1111.586794] selinux_netlink_send: 38 callbacks suppressed [ 1111.586812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 02:47:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1111.706618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 [ 1111.727338] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 [ 1111.737744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 02:47:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1111.814684] FAULT_INJECTION: forcing a failure. [ 1111.814684] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.817863] CPU: 1 PID: 17872 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1111.819529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.821537] Call Trace: [ 1111.822174] dump_stack+0x107/0x167 [ 1111.823050] should_fail.cold+0x5/0xa [ 1111.823985] ? create_object.isra.0+0x3a/0xa20 [ 1111.825078] should_failslab+0x5/0x20 [ 1111.825990] kmem_cache_alloc+0x5b/0x310 [ 1111.826973] create_object.isra.0+0x3a/0xa20 [ 1111.828031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1111.829263] kmem_cache_alloc_bulk+0x168/0x320 [ 1111.830364] io_submit_sqes+0x6fe6/0x8610 [ 1111.831398] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1111.832605] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1111.833766] ? find_held_lock+0x2c/0x110 [ 1111.834747] ? io_submit_sqes+0x8610/0x8610 [ 1111.835802] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1111.836970] ? wait_for_completion_io+0x270/0x270 [ 1111.838128] ? rcu_read_lock_any_held+0x75/0xa0 [ 1111.839238] ? vfs_write+0x354/0xb10 [ 1111.840137] ? fput_many+0x2f/0x1a0 [ 1111.841005] ? ksys_write+0x1a9/0x260 [ 1111.841900] ? __ia32_sys_read+0xb0/0xb0 [ 1111.842870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.844112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.845349] do_syscall_64+0x33/0x40 [ 1111.846225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.847444] RIP: 0033:0x7f7d176d5b19 [ 1111.848334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.852747] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1111.854551] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1111.856232] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1111.857926] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.859647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1111.861356] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1111.898242] 9pnet: Insufficient options for proto=fd 02:47:08 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1111.930216] 9pnet: Insufficient options for proto=fd 02:47:08 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:47:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953b", 0x65, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:08 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1112.073591] FAULT_INJECTION: forcing a failure. [ 1112.073591] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.076543] CPU: 1 PID: 17882 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1112.078150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.078398] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 [ 1112.080056] Call Trace: [ 1112.080082] dump_stack+0x107/0x167 [ 1112.080105] should_fail.cold+0x5/0xa [ 1112.080127] ? create_object.isra.0+0x3a/0xa20 [ 1112.080151] should_failslab+0x5/0x20 [ 1112.080171] kmem_cache_alloc+0x5b/0x310 [ 1112.080191] ? mark_held_locks+0x9e/0xe0 [ 1112.080216] create_object.isra.0+0x3a/0xa20 [ 1112.080232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.080260] kmem_cache_alloc_bulk+0x168/0x320 [ 1112.080288] io_submit_sqes+0x6fe6/0x8610 [ 1112.080342] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1112.094045] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1112.095139] ? find_held_lock+0x2c/0x110 [ 1112.096067] ? io_submit_sqes+0x8610/0x8610 [ 1112.097047] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1112.098138] ? wait_for_completion_io+0x270/0x270 [ 1112.099235] ? rcu_read_lock_any_held+0x75/0xa0 [ 1112.100298] ? vfs_write+0x354/0xb10 [ 1112.101144] ? fput_many+0x2f/0x1a0 [ 1112.101971] ? ksys_write+0x1a9/0x260 [ 1112.102835] ? __ia32_sys_read+0xb0/0xb0 [ 1112.103756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.104957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.106121] do_syscall_64+0x33/0x40 [ 1112.106952] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.107530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 [ 1112.108113] RIP: 0033:0x7f7089daab19 [ 1112.108131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.108142] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1112.108164] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1112.108175] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1112.108199] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1112.122070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.123654] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1112.131779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 [ 1112.185533] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=17656 comm=syz-executor.4 [ 1112.203637] 9pnet: Insufficient options for proto=fd [ 1112.230706] 9pnet: Insufficient options for proto=fd [ 1112.288291] FAULT_INJECTION: forcing a failure. [ 1112.288291] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.290624] CPU: 0 PID: 17893 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1112.291977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.293606] Call Trace: [ 1112.294128] dump_stack+0x107/0x167 [ 1112.294839] should_fail.cold+0x5/0xa [ 1112.295577] ? create_object.isra.0+0x3a/0xa20 [ 1112.296484] should_failslab+0x5/0x20 [ 1112.297221] kmem_cache_alloc+0x5b/0x310 [ 1112.297998] ? mark_held_locks+0x9e/0xe0 [ 1112.298784] create_object.isra.0+0x3a/0xa20 [ 1112.299641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1112.300646] kmem_cache_alloc_bulk+0x168/0x320 [ 1112.301543] io_submit_sqes+0x6fe6/0x8610 [ 1112.302369] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1112.303336] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1112.304284] ? find_held_lock+0x2c/0x110 [ 1112.305070] ? io_submit_sqes+0x8610/0x8610 [ 1112.305911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1112.306850] ? wait_for_completion_io+0x270/0x270 [ 1112.307805] ? rcu_read_lock_any_held+0x75/0xa0 [ 1112.308709] ? vfs_write+0x354/0xb10 [ 1112.309432] ? fput_many+0x2f/0x1a0 [ 1112.310134] ? ksys_write+0x1a9/0x260 [ 1112.310872] ? __ia32_sys_read+0xb0/0xb0 [ 1112.311667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.312695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.313695] do_syscall_64+0x33/0x40 [ 1112.314409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.315392] RIP: 0033:0x7f7d176d5b19 [ 1112.316118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.319649] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1112.321116] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1112.322658] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1112.324028] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1112.325389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1112.326752] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:47:22 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953b", 0x65, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:47:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:47:22 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1126.187742] FAULT_INJECTION: forcing a failure. [ 1126.187742] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.189404] CPU: 0 PID: 18113 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1126.190343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.191474] Call Trace: [ 1126.191835] dump_stack+0x107/0x167 [ 1126.192340] should_fail.cold+0x5/0xa [ 1126.192872] ? create_object.isra.0+0x3a/0xa20 [ 1126.193503] should_failslab+0x5/0x20 [ 1126.194018] kmem_cache_alloc+0x5b/0x310 [ 1126.194572] ? mark_held_locks+0x9e/0xe0 [ 1126.195132] create_object.isra.0+0x3a/0xa20 [ 1126.195736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.196442] kmem_cache_alloc_bulk+0x168/0x320 [ 1126.197080] io_submit_sqes+0x6fe6/0x8610 [ 1126.197664] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.198347] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.199014] ? io_submit_sqes+0x8610/0x8610 [ 1126.199598] ? recalibrate_cpu_khz+0x10/0x10 [ 1126.200197] ? ktime_get+0x158/0x1f0 [ 1126.200721] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1126.201299] ? clockevents_program_event+0x131/0x360 [ 1126.201983] ? tick_program_event+0xa8/0x140 [ 1126.202575] ? hrtimer_interrupt+0x771/0x9b0 [ 1126.203174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.203883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.204596] do_syscall_64+0x33/0x40 [ 1126.205105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.205807] RIP: 0033:0x7f7d176d5b19 [ 1126.206315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.208816] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1126.209847] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1126.210826] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1126.211786] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.212818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.213784] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1126.249601] FAULT_INJECTION: forcing a failure. [ 1126.249601] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.252339] CPU: 1 PID: 18119 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1126.253829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.255604] Call Trace: [ 1126.256172] dump_stack+0x107/0x167 [ 1126.256971] should_fail.cold+0x5/0xa [ 1126.257780] ? create_object.isra.0+0x3a/0xa20 [ 1126.258758] should_failslab+0x5/0x20 [ 1126.259566] kmem_cache_alloc+0x5b/0x310 [ 1126.260455] ? mark_held_locks+0x9e/0xe0 [ 1126.261323] create_object.isra.0+0x3a/0xa20 [ 1126.262250] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.263338] kmem_cache_alloc_bulk+0x168/0x320 [ 1126.264336] io_submit_sqes+0x6fe6/0x8610 [ 1126.265250] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.266307] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.267326] ? find_held_lock+0x2c/0x110 [ 1126.268190] ? io_submit_sqes+0x8610/0x8610 [ 1126.269131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1126.270160] ? wait_for_completion_io+0x270/0x270 [ 1126.271183] ? rcu_read_lock_any_held+0x75/0xa0 [ 1126.272163] ? vfs_write+0x354/0xb10 [ 1126.272962] ? fput_many+0x2f/0x1a0 [ 1126.273732] ? ksys_write+0x1a9/0x260 [ 1126.274545] ? __ia32_sys_read+0xb0/0xb0 [ 1126.275400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.276506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.277585] do_syscall_64+0x33/0x40 [ 1126.278363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.279442] RIP: 0033:0x7f7089daab19 [ 1126.280222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.284076] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1126.285674] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1126.287171] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1126.288680] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.290170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.291649] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 02:47:22 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, 0x0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:47:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953b", 0x65, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 1126.344655] 9pnet: Insufficient options for proto=fd [ 1126.365585] 9pnet: Insufficient options for proto=fd 02:47:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:47:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d9", 0x68, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:23 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = inotify_init1(0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/168, 0xa8}], 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001780)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f00000017c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x1, 0x3, 0x1, 0x4, 0x0, 0xffff, 0x310a0, 0x12, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x885}, 0x0, 0x6, 0x1000, 0x2, 0x7ff, 0x5, 0x3, 0x0, 0xffff, 0x0, 0xa3}, 0x0, 0x8, r2, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001800)=ANY=[@ANYBLOB="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"]) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r4, r1, 0x0) [ 1126.501830] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.504843] 9pnet: Insufficient options for proto=fd [ 1126.509821] FAULT_INJECTION: forcing a failure. [ 1126.509821] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.511550] FAULT_INJECTION: forcing a failure. [ 1126.511550] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.512378] CPU: 1 PID: 18340 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1126.514996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.516774] Call Trace: [ 1126.517345] dump_stack+0x107/0x167 [ 1126.518133] should_fail.cold+0x5/0xa [ 1126.518946] ? create_object.isra.0+0x3a/0xa20 [ 1126.519922] should_failslab+0x5/0x20 [ 1126.520744] kmem_cache_alloc+0x5b/0x310 [ 1126.521609] ? mark_held_locks+0x9e/0xe0 [ 1126.522485] create_object.isra.0+0x3a/0xa20 [ 1126.523417] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.524514] kmem_cache_alloc_bulk+0x168/0x320 [ 1126.525508] io_submit_sqes+0x6fe6/0x8610 [ 1126.526437] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.527500] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.528534] ? find_held_lock+0x2c/0x110 [ 1126.529400] ? io_submit_sqes+0x8610/0x8610 [ 1126.530315] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1126.531337] ? wait_for_completion_io+0x270/0x270 [ 1126.532371] ? rcu_read_lock_any_held+0x75/0xa0 [ 1126.533349] ? vfs_write+0x354/0xb10 [ 1126.534135] ? fput_many+0x2f/0x1a0 [ 1126.534901] ? ksys_write+0x1a9/0x260 [ 1126.535705] ? __ia32_sys_read+0xb0/0xb0 [ 1126.536574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.537680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.538768] do_syscall_64+0x33/0x40 [ 1126.539551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.540636] RIP: 0033:0x7f7d176d5b19 [ 1126.541423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.545276] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1126.546863] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1126.548356] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1126.549843] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.551335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.552829] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1126.554343] CPU: 0 PID: 18377 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1126.555161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.556117] Call Trace: [ 1126.556431] dump_stack+0x107/0x167 [ 1126.556850] should_fail.cold+0x5/0xa [ 1126.557293] ? create_object.isra.0+0x3a/0xa20 [ 1126.557823] should_failslab+0x5/0x20 [ 1126.558260] kmem_cache_alloc+0x5b/0x310 [ 1126.558731] ? mark_held_locks+0x9e/0xe0 [ 1126.559199] create_object.isra.0+0x3a/0xa20 [ 1126.559700] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.560285] kmem_cache_alloc_bulk+0x168/0x320 [ 1126.560833] io_submit_sqes+0x6fe6/0x8610 [ 1126.561332] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.561907] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.562472] ? find_held_lock+0x2c/0x110 [ 1126.562947] ? io_submit_sqes+0x8610/0x8610 [ 1126.563455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1126.564019] ? wait_for_completion_io+0x270/0x270 [ 1126.564582] ? rcu_read_lock_any_held+0x75/0xa0 [ 1126.565116] ? vfs_write+0x354/0xb10 [ 1126.565547] ? fput_many+0x2f/0x1a0 [ 1126.565967] ? ksys_write+0x1a9/0x260 [ 1126.566407] ? __ia32_sys_read+0xb0/0xb0 [ 1126.566877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.567480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.568077] do_syscall_64+0x33/0x40 [ 1126.568526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.569114] RIP: 0033:0x7f7089daab19 [ 1126.569545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.571684] RSP: 002b:00007f70872ff188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1126.572579] RAX: ffffffffffffffda RBX: 00007f7089ebe020 RCX: 00007f7089daab19 [ 1126.573395] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1126.574224] RBP: 00007f70872ff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.575047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.575881] R13: 00007ffc6f5c0a5f R14: 00007f70872ff300 R15: 0000000000022000 [ 1126.612796] 9pnet: Insufficient options for proto=fd 02:47:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d9", 0x68, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1126.660779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.672536] 9pnet: Insufficient options for proto=fd [ 1126.695829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 02:47:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:23 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) [ 1126.725319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.809393] 9pnet: Insufficient options for proto=fd [ 1126.826377] FAULT_INJECTION: forcing a failure. [ 1126.826377] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.829539] CPU: 1 PID: 18563 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1126.831123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.833033] Call Trace: [ 1126.833640] dump_stack+0x107/0x167 [ 1126.834483] should_fail.cold+0x5/0xa [ 1126.835367] ? create_object.isra.0+0x3a/0xa20 [ 1126.836437] should_failslab+0x5/0x20 [ 1126.837325] kmem_cache_alloc+0x5b/0x310 [ 1126.838263] ? mark_held_locks+0x9e/0xe0 [ 1126.839210] create_object.isra.0+0x3a/0xa20 [ 1126.840217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.841612] kmem_cache_alloc+0x159/0x310 [ 1126.842774] xas_alloc+0x336/0x440 [ 1126.843646] xas_create+0x34a/0x10d0 [ 1126.844505] ? kernel_text_address+0xf2/0x120 [ 1126.845522] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1126.846711] xas_store+0x8c/0x1c40 [ 1126.847546] __xa_store+0x164/0x2d0 [ 1126.848384] ? xa_delete_node+0x280/0x280 [ 1126.849346] ? trace_hardirqs_on+0x5b/0x180 [ 1126.850343] xa_store+0x31/0x50 [ 1126.851097] __io_uring_add_tctx_node+0x1cf/0x520 [ 1126.852188] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1126.853381] ? __do_sys_io_uring_enter+0x1467/0x1890 [ 1126.854528] ? __io_uring_add_tctx_node+0x6/0x520 [ 1126.855623] __do_sys_io_uring_enter+0x146f/0x1890 [ 1126.856757] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1126.857772] ? _raw_spin_unlock_irq+0x27/0x30 [ 1126.858787] ? io_submit_sqes+0x8610/0x8610 [ 1126.859762] ? finish_task_switch+0x1a4/0x5d0 [ 1126.860783] ? __switch_to+0x572/0xf70 [ 1126.861653] ? __switch_to_asm+0x3a/0x60 [ 1126.862560] ? __switch_to_asm+0x34/0x60 [ 1126.863476] ? __schedule+0x82c/0x1ea0 [ 1126.864369] ? io_schedule_timeout+0x140/0x140 [ 1126.865388] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1126.866415] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1126.867619] ? ksys_write+0x1a9/0x260 [ 1126.868490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.869669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.870829] do_syscall_64+0x33/0x40 [ 1126.871662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.872819] RIP: 0033:0x7f7d176d5b19 [ 1126.873653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.877792] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1126.879490] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1126.881088] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1126.882678] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.884262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.885862] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1126.936399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.945404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.958276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.963428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.992285] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 [ 1126.995167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=18118 comm=syz-executor.4 02:47:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:47:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:47:37 executing program 1: clock_adjtime(0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x40, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf423f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xf6}) clock_adjtime(0x7, &(0x7f0000000140)={0x3f, 0x2, 0xfff, 0x5, 0xfffffffffffff63b, 0x0, 0x8001, 0x8000, 0x100, 0x8, 0x1, 0xb79, 0x1, 0x4, 0x8, 0x80000000, 0x0, 0x7f, 0x7, 0x9, 0x3, 0xc91f, 0x100000001, 0x94f4, 0x3, 0x7}) 02:47:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:38 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:47:38 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d9", 0x68, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) [ 1141.207835] 9pnet: Insufficient options for proto=fd 02:47:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1141.234428] FAULT_INJECTION: forcing a failure. [ 1141.234428] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.235745] CPU: 0 PID: 18591 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1141.236475] FAULT_INJECTION: forcing a failure. [ 1141.236475] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.236539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.236550] Call Trace: [ 1141.240272] dump_stack+0x107/0x167 [ 1141.240697] should_fail.cold+0x5/0xa [ 1141.241147] ? create_object.isra.0+0x3a/0xa20 [ 1141.241679] should_failslab+0x5/0x20 [ 1141.242119] kmem_cache_alloc+0x5b/0x310 [ 1141.242590] ? mark_held_locks+0x9e/0xe0 [ 1141.243082] create_object.isra.0+0x3a/0xa20 [ 1141.243592] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.244181] kmem_cache_alloc_bulk+0x168/0x320 [ 1141.244714] io_submit_sqes+0x6fe6/0x8610 [ 1141.245219] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.245804] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.246362] ? find_held_lock+0x2c/0x110 [ 1141.246833] ? io_submit_sqes+0x8610/0x8610 [ 1141.247343] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.247906] ? wait_for_completion_io+0x270/0x270 [ 1141.248465] ? rcu_read_lock_any_held+0x75/0xa0 [ 1141.249012] ? vfs_write+0x354/0xb10 [ 1141.249443] ? fput_many+0x2f/0x1a0 [ 1141.249862] ? ksys_write+0x1a9/0x260 [ 1141.250303] ? __ia32_sys_read+0xb0/0xb0 [ 1141.250775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.251381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.251986] do_syscall_64+0x33/0x40 [ 1141.252414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.253011] RIP: 0033:0x7f7d176d5b19 [ 1141.253437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.255557] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1141.256437] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1141.257264] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1141.258095] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.258916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.259735] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1141.260585] CPU: 1 PID: 18581 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1141.262149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.264003] Call Trace: [ 1141.264593] dump_stack+0x107/0x167 [ 1141.265421] should_fail.cold+0x5/0xa [ 1141.266274] ? create_object.isra.0+0x3a/0xa20 [ 1141.267298] should_failslab+0x5/0x20 [ 1141.268154] kmem_cache_alloc+0x5b/0x310 [ 1141.269066] ? mark_held_locks+0x9e/0xe0 [ 1141.269978] create_object.isra.0+0x3a/0xa20 [ 1141.270962] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.272098] kmem_cache_alloc_bulk+0x168/0x320 [ 1141.273137] io_submit_sqes+0x6fe6/0x8610 [ 1141.274096] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.275208] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.276290] ? find_held_lock+0x2c/0x110 [ 1141.277232] ? io_submit_sqes+0x8610/0x8610 [ 1141.278207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.279289] ? wait_for_completion_io+0x270/0x270 [ 1141.280365] ? rcu_read_lock_any_held+0x75/0xa0 [ 1141.281418] ? vfs_write+0x354/0xb10 02:47:39 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) [ 1141.282251] ? fput_many+0x2f/0x1a0 [ 1141.283185] ? ksys_write+0x1a9/0x260 [ 1141.284033] ? __ia32_sys_read+0xb0/0xb0 [ 1141.284951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.286117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.287265] do_syscall_64+0x33/0x40 [ 1141.288095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.289241] RIP: 0033:0x7f7089daab19 [ 1141.290072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.294156] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1141.295850] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1141.297443] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1141.299042] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.300626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.302236] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1141.322776] 9pnet: Insufficient options for proto=fd 02:47:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x3, 0x2, 0x2, 0x8, 0x0, 0x2000}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, 0x0) getsockopt$inet_opts(r1, 0x21, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40012220, &(0x7f0000000b00)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x1000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd649, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x1001000, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESDEC]) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000480), 0x4) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x52]}, 0x8, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x5, 0x0, 0x7f, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f00000004c0), 0xe}, 0x8, 0x6, 0x1f, 0x0, 0x3, 0x8, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0xfff, 0x6, 0xff, 0x80000001, 0x7fff}) creat(&(0x7f0000000040)='./file0/../file0\x00', 0x44) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) [ 1141.366523] 9pnet: Insufficient options for proto=fd 02:47:39 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1141.398847] FAULT_INJECTION: forcing a failure. [ 1141.398847] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.401730] CPU: 1 PID: 18602 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1141.403279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.405134] Call Trace: 02:47:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1141.405725] dump_stack+0x107/0x167 [ 1141.406729] should_fail.cold+0x5/0xa [ 1141.407220] selinux_netlink_send: 29 callbacks suppressed [ 1141.407230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.407579] ? create_object.isra.0+0x3a/0xa20 [ 1141.411906] should_failslab+0x5/0x20 [ 1141.412753] kmem_cache_alloc+0x5b/0x310 [ 1141.413667] ? mark_held_locks+0x9e/0xe0 [ 1141.414579] create_object.isra.0+0x3a/0xa20 [ 1141.415556] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.416698] kmem_cache_alloc_bulk+0x168/0x320 [ 1141.417722] io_submit_sqes+0x6fe6/0x8610 [ 1141.418678] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.419794] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.420883] ? find_held_lock+0x2c/0x110 [ 1141.421796] ? io_submit_sqes+0x8610/0x8610 [ 1141.422768] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.423835] ? wait_for_completion_io+0x270/0x270 [ 1141.424918] ? rcu_read_lock_any_held+0x75/0xa0 [ 1141.425940] ? vfs_write+0x354/0xb10 [ 1141.426772] ? fput_many+0x2f/0x1a0 [ 1141.427583] ? ksys_write+0x1a9/0x260 [ 1141.428431] ? __ia32_sys_read+0xb0/0xb0 [ 1141.429350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.430518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.431668] do_syscall_64+0x33/0x40 [ 1141.432497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.433644] RIP: 0033:0x7f7d176d5b19 [ 1141.434470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.438575] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1141.440272] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1141.441576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.441879] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1141.441895] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.446467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.448054] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1141.457149] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.466910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.468757] 9pnet: Insufficient options for proto=fd 02:47:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:47:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d96526", 0x6a, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1141.570344] 9pnet: Insufficient options for proto=fd [ 1141.578608] 9pnet: Insufficient options for proto=fd [ 1141.587568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.603607] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.616698] FAULT_INJECTION: forcing a failure. [ 1141.616698] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.619564] CPU: 1 PID: 18810 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1141.621113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.622963] Call Trace: [ 1141.623552] dump_stack+0x107/0x167 [ 1141.624363] should_fail.cold+0x5/0xa [ 1141.625227] should_failslab+0x5/0x20 [ 1141.626080] kmem_cache_alloc_bulk+0x4b/0x320 02:47:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1141.627093] io_submit_sqes+0x6fe6/0x8610 [ 1141.628199] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.629307] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.630382] ? find_held_lock+0x2c/0x110 [ 1141.631291] ? io_submit_sqes+0x8610/0x8610 [ 1141.632263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.633344] ? wait_for_completion_io+0x270/0x270 [ 1141.633808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.634406] ? rcu_read_lock_any_held+0x75/0xa0 [ 1141.634433] ? vfs_write+0x354/0xb10 [ 1141.637595] ? fput_many+0x2f/0x1a0 [ 1141.638408] ? ksys_write+0x1a9/0x260 [ 1141.639250] ? __ia32_sys_read+0xb0/0xb0 [ 1141.640149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.641313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.642454] do_syscall_64+0x33/0x40 [ 1141.643285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.644417] RIP: 0033:0x7f7089daab19 [ 1141.645237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.647875] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.649284] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1141.649306] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1141.649317] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1141.649334] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.657020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.658610] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1141.691961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.693890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=18579 comm=syz-executor.4 [ 1141.719571] 9pnet: Insufficient options for proto=fd 02:47:55 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4]) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendfile(r6, r5, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:47:55 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:47:55 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:47:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d96526", 0x6a, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:47:55 executing program 1: syz_io_uring_setup(0x39f7, &(0x7f0000000280), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x5) 02:47:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1157.421495] FAULT_INJECTION: forcing a failure. [ 1157.421495] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.423153] CPU: 0 PID: 18837 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1157.424046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.425106] Call Trace: [ 1157.425456] dump_stack+0x107/0x167 [ 1157.425925] should_fail.cold+0x5/0xa [ 1157.426419] ? create_object.isra.0+0x3a/0xa20 [ 1157.427030] should_failslab+0x5/0x20 [ 1157.427529] kmem_cache_alloc+0x5b/0x310 [ 1157.428069] create_object.isra.0+0x3a/0xa20 [ 1157.428638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1157.429302] kmem_cache_alloc_bulk+0x168/0x320 [ 1157.429953] io_submit_sqes+0x6fe6/0x8610 [ 1157.430512] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.431183] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.431808] ? find_held_lock+0x2c/0x110 [ 1157.432337] ? io_submit_sqes+0x8610/0x8610 [ 1157.432929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1157.433561] ? wait_for_completion_io+0x270/0x270 [ 1157.434186] ? rcu_read_lock_any_held+0x75/0xa0 [ 1157.434788] ? vfs_write+0x354/0xb10 [ 1157.435274] ? fput_many+0x2f/0x1a0 [ 1157.435758] ? ksys_write+0x1a9/0x260 [ 1157.436258] ? __ia32_sys_read+0xb0/0xb0 [ 1157.436786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1157.437470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.438130] do_syscall_64+0x33/0x40 [ 1157.438650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.439315] RIP: 0033:0x7f7089daab19 [ 1157.439796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.442174] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1157.443150] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1157.444059] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1157.444974] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.445901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.446313] FAULT_INJECTION: forcing a failure. [ 1157.446313] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.446809] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1157.452495] CPU: 1 PID: 18841 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1157.454464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.456165] 9pnet: Insufficient options for proto=fd [ 1157.456217] Call Trace: [ 1157.457427] dump_stack+0x107/0x167 [ 1157.458188] should_fail.cold+0x5/0xa [ 1157.458985] ? create_object.isra.0+0x3a/0xa20 [ 1157.459941] should_failslab+0x5/0x20 [ 1157.460735] kmem_cache_alloc+0x5b/0x310 [ 1157.461628] ? mark_held_locks+0x9e/0xe0 [ 1157.462478] create_object.isra.0+0x3a/0xa20 [ 1157.463392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1157.464454] kmem_cache_alloc_bulk+0x168/0x320 [ 1157.465422] io_submit_sqes+0x6fe6/0x8610 [ 1157.466318] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.467371] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.468377] ? find_held_lock+0x2c/0x110 [ 1157.469232] ? io_submit_sqes+0x8610/0x8610 [ 1157.470152] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1157.471158] ? wait_for_completion_io+0x270/0x270 [ 1157.472164] ? rcu_read_lock_any_held+0x75/0xa0 [ 1157.473135] ? vfs_write+0x354/0xb10 [ 1157.473920] ? fput_many+0x2f/0x1a0 [ 1157.474683] ? ksys_write+0x1a9/0x260 [ 1157.475481] ? __ia32_sys_read+0xb0/0xb0 [ 1157.476335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1157.477429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.478505] do_syscall_64+0x33/0x40 [ 1157.479277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.480341] RIP: 0033:0x7f7d176d5b19 [ 1157.481114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.484937] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1157.486528] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1157.488015] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1157.489507] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.490997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.492492] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 02:47:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) 02:47:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1157.538605] FAULT_INJECTION: forcing a failure. [ 1157.538605] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.540283] CPU: 0 PID: 18867 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1157.541134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.542163] Call Trace: [ 1157.542507] dump_stack+0x107/0x167 [ 1157.542963] should_fail.cold+0x5/0xa [ 1157.543434] ? create_object.isra.0+0x3a/0xa20 [ 1157.544001] should_failslab+0x5/0x20 [ 1157.544503] kmem_cache_alloc+0x5b/0x310 [ 1157.545013] ? mark_held_locks+0x9e/0xe0 [ 1157.545520] create_object.isra.0+0x3a/0xa20 [ 1157.546064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1157.546692] kmem_cache_alloc_bulk+0x168/0x320 [ 1157.547262] io_submit_sqes+0x6fe6/0x8610 [ 1157.547783] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.548420] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.549026] ? find_held_lock+0x2c/0x110 [ 1157.549536] ? io_submit_sqes+0x8610/0x8610 [ 1157.550073] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1157.550669] ? wait_for_completion_io+0x270/0x270 [ 1157.551271] ? rcu_read_lock_any_held+0x75/0xa0 [ 1157.551835] ? vfs_write+0x354/0xb10 [ 1157.552293] ? fput_many+0x2f/0x1a0 [ 1157.552736] ? ksys_write+0x1a9/0x260 [ 1157.553199] ? __ia32_sys_read+0xb0/0xb0 [ 1157.553702] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1157.554342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.554970] do_syscall_64+0x33/0x40 [ 1157.555422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.556048] RIP: 0033:0x7f7089daab19 [ 1157.556508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.558762] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1157.559695] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1157.560563] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1157.561445] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.562325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.563209] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1157.587618] 9pnet: Insufficient options for proto=fd [ 1157.591813] 9pnet: Insufficient options for proto=fd 02:47:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1157.605233] FAULT_INJECTION: forcing a failure. [ 1157.605233] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.606707] CPU: 0 PID: 18898 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1157.607585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1157.608996] Call Trace: [ 1157.609728] dump_stack+0x107/0x167 [ 1157.610520] should_fail.cold+0x5/0xa [ 1157.611350] ? create_object.isra.0+0x3a/0xa20 02:47:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) [ 1157.612346] should_failslab+0x5/0x20 [ 1157.613397] kmem_cache_alloc+0x5b/0x310 [ 1157.614290] ? mark_held_locks+0x9e/0xe0 [ 1157.615186] create_object.isra.0+0x3a/0xa20 [ 1157.616148] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1157.617260] kmem_cache_alloc_bulk+0x168/0x320 [ 1157.618277] io_submit_sqes+0x6fe6/0x8610 [ 1157.619225] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.620322] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1157.621396] ? find_held_lock+0x2c/0x110 [ 1157.622302] ? io_submit_sqes+0x8610/0x8610 [ 1157.623263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1157.624321] ? wait_for_completion_io+0x270/0x270 [ 1157.625389] ? rcu_read_lock_any_held+0x75/0xa0 [ 1157.626406] ? vfs_write+0x354/0xb10 [ 1157.627218] ? fput_many+0x2f/0x1a0 [ 1157.628016] ? ksys_write+0x1a9/0x260 [ 1157.628855] ? __ia32_sys_read+0xb0/0xb0 [ 1157.629760] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1157.630906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1157.632041] do_syscall_64+0x33/0x40 [ 1157.632862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1157.634009] RIP: 0033:0x7f7089daab19 [ 1157.634830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1157.638850] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1157.640509] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1157.642075] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1157.643630] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1157.645188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.646752] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000002a80)={0x26b4, 0x3a, 0x100, 0x70bd2d, 0x25dfdbff, {0x12}, [@typed={0x1004, 0x20, 0x0, 0x0, @binary="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"}, @nested={0x155, 0x1f, 0x0, 0x1, [@generic="e5984c350c433cc18e545a89b7712cff6e99f9868876f29f438c6e9456cb61f966835384fe0043f2bd646db6c92c718437e33026f58f913e92b01a55e68068312fc13518fb2e744ede49a054f000e41cf643f9701a46127720f451f2829765321922703fe94e2c363678407f14e3ccc15539a968aaa661de336f7a7e7bfe620fd764593f59aa829baa9aa8219d6894b601", @generic="c97aa664e7d1238d9220a4fd97cc5708ded67b7813d1cd24c4bc01fd8aad5e6acfc190560b5c4119771df8b23b450a1efd2c60b08d969f8d277c5a4615175160f19263ac3e3b41f4622e7500a3a6f2a69402a53ee3dcbd5400aefe924b58ab7ee297f0a2df4bf8b19f5e995c52c60e79e48162485c6d2e9b8548d9d898becd72ebfad163fa8220837d9fd4d1ed260122", @generic="5cd38e41a0c11d7f2bc533", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="b00c140fa6908c09ee", @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x1f8, 0xc, 0x0, 0x1, [@generic="16b8bcd818edd86d3129f8320bc1c4ea817d2726ad72a44a76c95883be7e77e729d3dd8c43c9b2929e099ffcc10c4f4d007ccf8b837bc90f97773468b35421e0da411fccab57c1838e07e4ead797b2a8d75764bcc8760dba65e7d17d75c409a1954c8d64c8db47c663d3ce4fae457d2d0381467aedbd83a46f7867ab7bf2d78300be43a263288d1ec044e8b1d9582808883a654596768edf2193d1af03242135c2", @generic="f3deef7e6c2af73479ed85ce07073623778eec3ac366c44cde22f123d8dabe68", @generic="c1afa356de9703fd0807e46bdea22e188a0868296f4838351015a3c5fe7735000fd3fda1502d3382f9369f70a8144b3ea9d2ddfa76d7a4839ea6a9", @generic="e469c3cb0e3025411c5590e4a326512ee34fd2d3b57d7d300c04b7a7e6ebdef0dae428825af97e784e10b579daed3372c432e3c2603eb7f7f0819e2c491c237b8460e606db70a482f9679900cf92114f42bcf49db07724d325c3e9df5097e4d1ac42ce109f903a281c25e7d504c60bdfc63e569dc72c0da959c819d8", @typed={0x78, 0x79, 0x0, 0x0, @binary="f5983c6ad2e1d13483cd8ab58c9bf18fafd3a11c59088a0952778b69cff13c7fc4b478401f17a39710d7a2b9b1351631a64d355c9da6c44af4e83350dab8243e71869e62131bb3cba71b3b645595fc7299a93cece3a2c0df512daad66014a852df29d8ef619c769ed6ce5d619a0b1b35af95cb55"}, @typed={0x4, 0x2b}]}, @generic="b0f21052a2ca28b16473e4c6124b637b980760738f8ab3744d2428605ab482148928d3022e84631f5c0a66f72189b17891032b9fffd407d5021f", @nested={0x1310, 0x18, 0x0, 0x1, [@typed={0xc, 0x67, 0x0, 0x0, @u64=0x200800000}, @typed={0x4, 0x93}, @typed={0xf1, 0x63, 0x0, 0x0, @binary="1af8a6c895a828ade3e166e9b0d9d0504c95d6737d899e8d28f6075c919a7773884258abf88116d100170ddd733b4c670088664ac4cd84e07fded63a758801e35caed350b7a3179481cd9858abb786341615f4875ca6b67fdb58c5dc804d076f549aa23176522838366d304e3da70f17cc7315ecaf7a818f558e543b8759ce8508ba7d9dd28cc6459a1a97e97d05dd898f53f64ec1579143e836dd68dd07d0a855a0d22f96d05287f52ad66be3c276a9acc59bc9171322a0965bc456112a790035b17d99bfcdb27a42603384558b7903438373ae7fc09d8b74c903ade44ccbd6335c047f21780ed68d4dfa84a3"}, @typed={0x8, 0x66, 0x0, 0x0, @uid=0xee01}, @generic="7d29a8e603cf08751c3c9ef5bbde9b97d212b1cba43244c76cc5217d5349b32fd742109aedcfe5eaa50d09be4b984c2c37fb8f65e77d43e51e7c0476758326703c4f8ad963a6bd357402a296aa3c24c7acede00b2f", @generic="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", @generic="1ada6cb376ab6767431a59d987b3f3cf997f12f57efe5b4bd76c6260d04acfefd82b471efbb6a8c9d63bd4a3e413060b505234e69bc39e178240ee84f0384830e4793f24bb11c22e4c49d901f2a0ff6cf6461e3bf1bea7d253ad552ca69391f30d37565e041c69", @generic="3e77b09765ceec880b51ef9624350b70c0057a9919d04618c376a3e5063f8ea74ed2dbf0ca5041017f2ea7f463c81fdabc0d356368ca26d7881d5724b81e4f9a84853568f280892c48ae20848e90b2d009842beb26442d85145a545dbfdb919ef9e54bed645f60df17927703ca6ba0878ff9c2caf0c191dae8a448dd0d288a327d4ff9201d5987e32e3ce9130bb75a342655225db68f544db9bbb9232f2f3c37718d84c10224e30417a319a0e8e1c305dcebc758ec649c9fc74e428392c70b3f2a206d766a448df90cab8dce1e20b54bb28c2472b9cdbe1881ced67fc4bbcbbee81058f5ab226d91b51edf", @generic="bf29a6c4f995d0abd0aa647a9053850f9b9ec66ec20de91d26c3f08baa4ae0cca9b47bc64f334e715a71918f9698bbe7054b54ae7cecfe1fd8d3e1f390994f50d6b0271267269550f369adaabadee5ddd247b0581d88b987c0"]}]}, 0x26b4}, 0x1, 0x0, 0x0, 0x4014}, 0x8000) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_setup(0x34ab, &(0x7f0000000080)={0x0, 0xe19f, 0x10, 0x1, 0x2ce, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, r8, &(0x7f0000001840)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000017c0)=@ieee802154}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x1400}}, 0xb1) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x300) 02:47:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:47:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d96526", 0x6a, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:47:56 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="b0c8ff207300000000000000ebff00000000a7024a65f4afb58645d7653cf3775d0000140000000000000000000000000000000000c8eb98c6968371f6857938de5f105163d0fff324c161dfe955b6426ab2cc5fa78b44ba7e8175d5d66dfeb45c2cdc15f0e535749f4bf672cc1a9d900c0443c429a8d00fb81b006f73aa7b932f1b55b37ee8d399ddfff1823a5184fb1d4d0053d51ce94b98e4ed42b86a49bdd6885e642a4cd09da2b93c9e941bd5817e14c97657ca0064b4b7a43a492e41644d1cdd72519902138bb646612ebc517d6d5cda1d9700b3434aa7393d0717cb2756d9dc2e7df8a6f102e6c04eff03df234cd2f3376636506ff06997ad4070c52bd02ab014f583248d91fc382e21c69c214787b514365e235af6997745013a0d3c7421b7fe8339b80a75befde32c4c752f8d0d0e00000000000000"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) [ 1157.753403] selinux_netlink_send: 38 callbacks suppressed [ 1157.753423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1157.842728] 9pnet: Insufficient options for proto=fd [ 1157.867881] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1157.876267] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1157.885825] 9pnet: Insufficient options for proto=fd [ 1157.894316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1158.034498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1158.053388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1158.083710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1158.094308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1158.146937] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 [ 1158.149745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=18839 comm=syz-executor.4 02:48:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc400, 0xa0) 02:48:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgrcv(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x26, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:48:11 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x12, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x10, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x4000, 0x9, 0x3ff, 0x9, 0xffff, 0x0, 0xfffd}, 0x0, 0x0, r0, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xff, 0x0, 0x7, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x80, 0x38b, 0x4c7, 0x3, 0x400, 0x7ff, 0x0, 0x0, 0xfffffe00, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0/file0\x00'}) accept4$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000440)=0xfffffffffffffd7d, 0x80800) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) syz_mount_image$vfat(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="2a3fc036f62ebb2e7291e82b914795b2cac324b67943edf22b946a62552c2702daad9b81", 0x24}], 0x808, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5]) r6 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) sendfile(r7, r6, 0x0, 0x4000007ffffffc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 02:48:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x3, 0x8, 0xa2, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x6}, 0x40000, 0xffffffff, 0x10001, 0x4, 0x1, 0x5, 0x9, 0x0, 0x1, 0x0, 0x1f}, 0xffffffffffffffff, 0xe, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x40010, r3, 0x10000000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000840)=@qipcrtr, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0x31b) signalfd4(0xffffffffffffffff, &(0x7f00000011c0)={[0x8001]}, 0x5, 0x180800) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3314c7e159f443f90b1aff04f119f95d3028d94a2fc37de8b95aa96d0c7aadc8095936db1b57694aa29e3ddd20c31f5539a8d7ce6bfdb32c22707cd13a6489c417", @ANYRESHEX=r0, @ANYBLOB="0b0b000000000000000000050000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r5, &(0x7f00000006c0)={&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000000cc0)=""/225, 0xe1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/130, 0x82}, {&(0x7f0000000e80)=""/155, 0x9b}], 0x9, &(0x7f0000001000)=""/143, 0x8f}, 0x60010000) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x80}, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) 02:48:11 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000ac2000000000000018f00907800000000"], 0x0) r0 = fork() wait4(r0, &(0x7f0000000000), 0x1, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x10001, 0x10002d) fork() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ptrace(0x10, r0) syz_emit_ethernet(0x78, &(0x7f0000000040)={@empty, @dev, @void, {@x25={0x805, {0x2, 0x5, 0x1, "822168a96b1dcaac48f52891e77728cb51f4cd951549060f0d2c947cceaab2715ea680d7f43b6f58de65b45e2d112289d9f0ec6364d96b64f01f8f0badb6f3ead46fd4f0ca74e3fe31c1d5d9502799f6556244095cc43bab03ff96c3e98ed0992a8fcff7dbfd54"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xeb9, 0x394, 0xc1e, 0xa7b]}) 02:48:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f0000000680)={[{@unhide}, {@check_strict}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, 'trusted.overlay.redirect\x00'}}, {@measure}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '#! '}}, {@euid_lt={'euid<', 0xee00}}, {@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@obj_type}, {@pcr={'pcr', 0x3d, 0x2b}}]}) futimesat(r1, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000780)={{0x0, 0xea60}, {0x77359400}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r3 = getpgrp(0x0) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4075, 0xfeb, 0x4) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1, 0x6}, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e2f0c1ea552e990d7110001666e2c7266646e6f3d6a121915eb9c8ec0368c8ba14b508f5334eae6f89b1f419d5895e01844cc1aecd6e6af420c0100000073e60867f0188bc13d234d7372623bbd703b456be1b47523870871ab83b65565a011d176fa9e5f39", @ANYRESHEX, @ANYBLOB=',w\x00dno=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC, @ANYBLOB="2c66736d616769633d30783030303030303030303030305d6666662c736d61636b66737472616e736d7574653d7365637479e60d7218"]) dup2(r0, r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) lseek(r4, 0x1, 0x4) 02:48:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x63) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000200)=0xe8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r6, r5) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x23f597cc1c759218}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xf4d3}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000001200)=0x4b) sendmsg$nl_generic(r9, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="dc1300003d0001002bbd7000ffdbdf2516000000c2005880863a0bee01c253b63d65d976ea751de5cdab67759af85cc17b66639966464f8e960422df110f7bf86f2491ddb04cebe14b2d559524227b5bc699c14e07a61532807fcd6dd0f120fcf4b937b7c9dba7a57740901bcaf78e5484520f59f4bdeb01768e520812de9fc3946e4de3c6dbdd07d252e9fce97a763851407a8c764e7d9c875ecd2b485c1e1e0fc9c5fdb25c7f0deb8fa6460dbc4b2674bc85be3dd5171065c8e6c0e595fb29306edaf03b897b4b67e6fa8838fce62c533f3efb03ab00000c007100040000000000000008004d8004006b000f16ea6ec9a00ff15b38a0488686dee2da358556973ff3aead6708e3b3fc710e707bd420d2c850c1dbee7f1d8033b99e0c5b8dc778e6fa0db8f22ca867102254c5c6692517f3aba6bb2efbb4df07c6ac14a8a522eec4916938907b78253416254bf264f040906128d5c193857e791c71bd6bbed8f35d71f36994b411285b532a9ad61a07bc4a90d0bba948ca52dff04d513bc40ec75029938d7a995b8a2ea97f4e92044d3faacb9e77ef6d00a21dcf619bf79042527ddf63c1576a908beabdf26f3edbff8cc05b40f2d537fc6ede7595d30313a8f603c00d901ed7a8d6b83bf8b3207816cb1ff0c7a705f90b4a85c1440ceb390edbb2e562fee5ac06d5aef666c6224361d2d3e134770b8e5dc69291425660d50790fd10d0f8be282fd0fbd924afe84e1d8df045ac6ba08ac6af472285c4a34c8e34b6b8f67494a69e48d8d2ad3a2110e32a57c2a6058b0fcfbc72806b72cc45746cc2efa36abc39702be4e38b4eb7e5f718a3437e7c3b78eb548a24694e655e762ed43c372d7ddb3a98d82104251f42eb07f88c74c521a354c34f2ccddf81c1fb52e99f4590ea3f6decce3bb6e7138accb5dc82aa135be76a4dab2a9d39864acd28e65042df070b37f8317154b3aa5184ff3d7f56f1f8d1c6e294fc9b9232d24a4c6f86361efaa78ae66ac7ef0b0c55542283790f8b2da6357601009716d12f42dbc8d14c47b4f188b190927e8f325ff6949aefbb7a0f4b74ec95948b62ef53b23cc30e6bafc37375584fcb8d2883b415468c00bc5291182d20dc37d6311ed01eb6f1b68df9ffc14baa1382494b58266221410ecbe4a4fd7ed09826acf8c4b2a9653ec307e604d591ded35def3413dc36cfa4633729f19b1b4b606a39228eaa93a47fac273278ac875bcf5e443b17b51f511c5359b761377947f365e87d0c1a50a4fa2535dcd543f7198ab952e5d22d67b681e5542597b1eb8194735da4aba5f3044657fbcf48710db53f0f1bddcae773a2ea79d5c158237cf563f04a48101c45ee94f1917e4d4bfb61d2c33171ac3a8e94dd3f41e066c4f969d6b8192bd01a1ca44c160789258831631f814f2a1a1e6feda767483bb4b493a681f22e752074b17473fdb113e49fd65fa98803c93eefdf7397040140e7c0e153cde59f913b2baa18079a91db2a3aefe55cd4eaf7aa349b3da6b95d92f20a0bd06c578f348566021406a40cb190aad32cc6feecce3c26857c47733b1275629c237016b34f0a1b6c33e0755bf652206c172485192270ac3784e92c18c7bd3f5cce7d5423e787a6ead60a13c7ee5eff7f5219a1a0098def44a867a02ac0eca5006a99f52b1e2a47992aa5244f115e08ddd0641fc1148aa3be9748c5d4374833c598d9a85d803b401647df21a7539c93bc541668156a8bfc243d7b08b7b222a10f4a8d9fa2b233a78c783423d02c20d4b1c7a58d9f2db59dd0f927f72a62708fd5dc8ebdbad674e847563ee9465046ecacc518d5a5d8c7a574eff4caefa9e4ab826b5b451a369c893b4fface22fce871a64c1bbdf1abe6904e2e921625be825fb0f1e6f3eabc27ed10640ff30011847abc9c63eae7c1947cfa9d04c21e1cfc059769c15261dc22ef62498bb322fe86eabaeceffe3f37041f62f9339dc8ec0f7f41484efbb738f38f63293a7725178809ea6f51c7a07c0eeac72be4d5f86bebdcd01778c69a65bc3755836c6e872f967d84d4c7892a3ffa60163e8ddd4e40ac7a543d3a9e4150bf1e483d436ff84de4cf8f95f71ee475365b91339a39d9088a16dab0baffe52284dca01e63b1e58cf61abb9903df8575df9b5d0d5d894868de0b55463a02324bd3a9a1175122c672d47d4415eba99a84bde78b31d014ab9f74c3e20fb5621db6f50c9408e085483cf5e00c542f8db7c6702b1d198f3bae89c1e1da7d0435e9c2c603349a45999f4b46b3c3d072351e05db96dab7cb572fb4c518203d8e9160083645f06e9ab5d502bcd36441f1c51b9fcb0162f94d8cf409be673d88d18e8f7b62ae386994c578f226fe659d1c38f2616c8fcd09e2970a172194da56c7e0fc26e311ffcecff1868916bf0997166595d68b41b39df6a881fc9132a1f4eb7bd9345a6794f7b3e9d3a060189179c354c0b2fdf7a2326a5c37b68c409e0cea1a056c1b20319c47622737080968f4515a097312c98508bf8d71d132f784558f2ffdafbc79c60332ad9aa771bbdcb965fc17bcef9140eadc25590fa69a151dbe492ad6c4d42f6a53776748323017f877cbcda8b2194a101198376ade052b99f4d13fea6efda3523c5f68ce5d72a97f0ba4629f5f96fc5b926ffc10da1c90528d2c0b93ed22ec18a112a875a172dd3812346a27aeab34e439895ebaad3e3ec0860cfbb82807505cc76f89dc7a65b35845c339760bb0ddcb7fba83fa52d7ef4b9107f51a4f7df3dcfde2a98e92de313d40afa290a2deae0390ed0d838eae28cae97741b7c6ed8a3e5018a607e64c1f90f22ab2dd54bc61c8947cd6e220a160e0747a8cb4416020dda98f73bfbf76afefd48a971457e24b16713fce1313d821e1bbebbfc5aa684cf17646bd074fb6cc4cdeb96ef810d3b854e080ed4721c5f81758a74dd7da37cf835ad5723ddf352f0c3ba3bf60325607caa42c80f15e0de0d1f85ded51855338adc1f7252e849a9e2e7979471f86cb0b01dc85c846dab2b8e4823eef364801ad4d7e59e1d08e1f317cfc28b1c97a7854bd2d4cb21c398381929b30eb603343b4156981c6549aba926d4d3dd36ce34620df9876f84abe55e3b78d2f85ff7a3f4b22651f05c9ae16a76281af0dd0b02934bf342c976ea6b31bc0cfa1b7d8d6934c49b965f0c956f3ef1a8f05170db828e7d7cb4521656e23d4f01f82a5158c8c25f58d0d6efde1853f7d1967dcf9430f6a0374b3a7955499cd77cfd0b17a2656b01b07f8c9e5d21d70384650c24b065e05429af7424e3af0abb7c7b8edc95fa4ca6c3db4204e5fb33ebb6c195a4acf7d6a39e0918bfe7d7d421927410fdb8064f24f2ccc6388fbc701322c01d1001b0a5bf73b32c9572509ef2d5e772904994ccf3eae772c3901b76c1ee19afbdfc788eb8a73d768886ba43cf0c626ff759eaae3a7349495e54c507cf95d69d99e797e53c6ada1eca559c554873f8d28416a86995d3e014555bd67d4ee5cf0cee596769add91612fdfe63e68358f8d42faf39d42d5d2dca238e084ec2ef43ac866840a7785d3181f9d0895b475268bbd40140985ae4754219cca227c1ab458f8b0c56958a5af1008c0d4d1d1d0850e812b7636eb67e51e423a7385d70d2671615458d55a4108147b5893fbe759b088088838919d565b40ff299a59819de17a954186c06c5fe8139740f0bf93b336f9cd9baaef5a13c953504a752d6c16a4bf5666bdcc7a648ffbdf77611da8bd1decc77b6867fcd23ef83a180ef155cee6cd6f39d751a0b0be9cbe4efffacec4c62e72d516960c4660e51547bd9ab07893858732cca67487d4b485f3f22d2274564bbb5ef2b12b15bdd3cf713ff8f4cd0187adae0d768875e307482008754c572d4b2617e644c419367332bdff17bb655d4057bd73475a702284f8dbbc6216885fe09afca93820e107996cba579b0301b2f9f8a08635e81e24409fdff1aeda0949395872ef118bbdc4b4dab7d67c33537f92df3255abf61f947d8ce9ee8f45a7afde4a37e7a51e14a6f8ded14b8215775ec895c1b11f69699b7ca66e4c6e4aa01f869021ceacb6fa6c561178c62f3dad1b12f210aa14f2cfc770e9a4e442a43be7553a7cbd6ee7825c58e0b294d155ef0de037ceda6ea996c981467409b9a91d86d496cedda2bede64dfeb1d023db63bdd2078415381d0ecd7ebe493c4ffb4d8baa2600796bff5a054373d81baf45f4e76274bd6694da96648862af57b2f2652442a8b46fbdcb437ed0f404ad774942df2282aee9fd2cf38f09ffb9d613c08818b5db5f56756ef8f04b769452c385c74f1397e147afdfece83f43fc67fab22428eda3a62272093271f6a955c47c69d36fa181feee98aef1d1ef494c0f53fb2c2e1c18dd2d09880c8fb36b66d6ddabe3ae27845ce425f2bf12cc696e667fff73b021b08aaca37ceb1bebd197190c889fef91837558a2651650a7517e64997ffc2bb9c3d6946967cd8ed09ab5c29bc50cbad48a9925118b0f097d8b073ad7b2b06771569705f78c504d7c9aae1ce8a568a981b161d8f4a02a6f2fb20dbdd95f1ed34aabc2331ae95994028365ac03115589711091ed41123849c33ae9f9e63b17d3b3da3b43d651fe75e829f39e6d0fd0d20b36363989b8c73d3ab5e3f45a6385b5b64fd4184ac182f1d06e7b93812b49b07138f829bdbdec3448aab5c724eadb2bfac9770c5a512bca152667ebe747923ca3c8948d9af95762e678a9dd2931eca82202f0633aea3269151b293d7b1a51002387f011a2a08a34df41272d083631d1a7d74ee066341338b9980ee816a01aa34fbbc8edfb355f3f15d9d0b1f6bd2d238518a276716e3161ae42cee627deb7f559acf93143cb510567af299ec6f63ffaaf8809138702c57e976aafcf5c3f38ace0cd71a8fc9e160817d37f750182b7611283de4c945446ffc0374e60b1a430cff26ba6737237d5c0a29cd1b9c656dfcaed28dc78dbb9380dc7ce64371f452bf5d720b7e22e7fbe969a5f7a8f28fee84e1b78241065679f152bfc9607dfbe1157bd3a551c25499ef1b0299acb8edeb6f3e671a2541917c32fb820b6550d19d23da0b8201be6e0c5a42cc48e1ade4c6bd4d558384258de683866fb1611267c110f2ac0eced802e694c58def14cfdf32306db82ee65809ba0c5bb6393eaa2cf854569891efec0531c428ca5f009aa4ac90856f5de3ae72da755d87bae4d1bca1ccea574074b25634020baea4222d1540cc41e36d9f2b9505b1470ce85f74aaa94577efc6c2f06461581d7f5c11fcedfef6a6d6b7a1525e7a9f1e9befc7c0d917248e487ec70b1baa4fe414e9be7e0addfea93d9001fdb4fc6b66b586f7d7ed311a455864dfe03dac2b598cf094bf9cfacad5c7e26bf6e7ecd3b31386c532491a869ff7d4118b08fd6cec739aa7f66fe915c038f6d6ff57eed918525c5addcd4683804786ef3765151866aa21aac8024fd8617ebfc066de566adde2052fb2abf1e771b1b91b20b101ba2ee4aff6084ac21c75f0ee937af132049aac462827847b3944fc3bcac237cdfe970613ab8d58dfb701ee095695fec1d3178e491d7413c776cc0fb7379344e909dde7258c78ef8623ed195d7322567cc554bd427cd3d2254305c0e487ca333952a5597fb8e3d7c7c3c2ecdecd253197ecf29e6ede7bfd9833f162659655a8516bfdbba60e3392ab4f761970e5deee31c53310024c3b6a8a339978d0a53eb3c452e5584f72663beddb12c5ea9d4f0c9495a10388e657b227c9d7ace27235d7486d50ea0ad6de5ebf2cafdcdc9d57d077f96f6059a6c2397be83c7a9f2efa7db4f803e56df9bf4acaf5550e0f13abcbe6f1954ded939e1bc1ad4a6dfce2a761c8bf0fd58af8bea12fd39ef3f2bf729aa3547af8442df2e9603df01a41b1e814e14d073458fe1512f4b9a15f227c5b3e69c881a26b647d2b7bbac284efc7c5a159049f5f70f7023bd115cc4f93dcc47ac76f798f4837f3390079d0fbe8367609ea425343d2125c060392fc33a63c9184409408df982ae5db2c1e5c53dbcad357f6c0b7519e0882288e1ea34e4514092f1daef2b7a077cbd45f96a7b68d223c12f13d73d83330617c36cb160718fb3a43650b5fceb8c31d0f8064cad987da01b165b215fe1584d356a8cd9f8e4e34d0af77670940b2cbb0f5834e752da4e7b8021f5c0e591fd8b09f382526cc7c9de2f7e81aad89dc45e7f1650f4dbaeeef5157f63f7e85e2ac3099e597742dd8f3ca93357bd2969bbd41d928cfcb72057ec76f068fc7149f3b9cdcff2076e7f14109d6edf99f648e36cc5b967500274e5a380172804455a61c0c36e6a58e23a2f42242c6856bb38ec635f65428865182b5567569bf8f6328a80d85ef996cf997d73f478f37fe68735e83d79a1c8a2582c5932d0c66aa70c8942a0d4f006f131c4a9f5a2d5a85d958f339fb951743196752f84cb0052ab078b8d845fab654060386bf3b8bfb8ee22f73950a65de879c9be5d34351a8a6ad575184dd90826c8a992f0524a3dc221b7422af4fe55e5c45f967e51383d6eac7536d10a55a423ad3d29ef671ba51a74ace73fdfc4280d4cc78d438573efbe6ed9843076b3a5e5763bc4356a00eca13018565dd6d791b0105d7aca70f5c4f3f6975f020ba617418c43b9b1516ecbebdcef0de0d5d4d809750ec84103bf925c862d11e6036eb4f287a4e493565ecb76edb1b0c709d4dc5d2c8c035b945de4d14005800ff010000000000000000000000000001a4008f807e00010005800850fd7f56b1fc2e70122299c96cc0f8714fed606caac0374a532062b28ade4f375367cbc948983ba0ba63fb2b89cdc8b00c0719bc6f3237206770089ee9fd086c78c7032f972c737a04025955a9f08c60b9108b2de875192ed3fad00e2bc3271ababdf2ecb0f5074f95c8", @ANYRES32=r10, @ANYBLOB="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"], 0x13dc}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4040, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@access_uid={'access', 0x3d, r4}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_loose}, {@cache_none}, {@aname={'aname', 0x3d, '@'}}, {@mmap}], [{@context={'context', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r10}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 02:48:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000000) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) [ 1172.699743] 9pnet: Insufficient options for proto=fd [ 1172.718711] 9pnet: Insufficient options for proto=fd [ 1172.731305] ====================================================== [ 1172.731305] WARNING: the mand mount option is being deprecated and [ 1172.731305] will be removed in v5.15! [ 1172.731305] ====================================================== [ 1172.739838] FAULT_INJECTION: forcing a failure. [ 1172.739838] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.742034] CPU: 0 PID: 19101 Comm: syz-executor.5 Not tainted 5.10.233 #1 [ 1172.743333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.744884] Call Trace: [ 1172.745382] dump_stack+0x107/0x167 [ 1172.746088] should_fail.cold+0x5/0xa [ 1172.746814] ? create_object.isra.0+0x3a/0xa20 [ 1172.747668] should_failslab+0x5/0x20 [ 1172.748372] kmem_cache_alloc+0x5b/0x310 [ 1172.749125] ? mark_held_locks+0x9e/0xe0 [ 1172.749917] create_object.isra.0+0x3a/0xa20 [ 1172.750740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1172.751697] kmem_cache_alloc_bulk+0x168/0x320 [ 1172.752557] io_submit_sqes+0x6fe6/0x8610 [ 1172.753333] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.754250] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.755139] ? find_held_lock+0x2c/0x110 [ 1172.755898] ? io_submit_sqes+0x8610/0x8610 [ 1172.756699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1172.757603] ? wait_for_completion_io+0x270/0x270 [ 1172.758502] ? rcu_read_lock_any_held+0x75/0xa0 [ 1172.759354] ? vfs_write+0x354/0xb10 [ 1172.760039] ? fput_many+0x2f/0x1a0 [ 1172.760695] ? ksys_write+0x1a9/0x260 [ 1172.761387] ? __ia32_sys_read+0xb0/0xb0 [ 1172.762161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.763127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.764081] do_syscall_64+0x33/0x40 [ 1172.764772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.765721] RIP: 0033:0x7f7089daab19 [ 1172.766413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.769807] RSP: 002b:00007f7087320188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1172.771221] RAX: ffffffffffffffda RBX: 00007f7089ebdf60 RCX: 00007f7089daab19 [ 1172.772537] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1172.773869] RBP: 00007f70873201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.775176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.776512] R13: 00007ffc6f5c0a5f R14: 00007f7087320300 R15: 0000000000022000 [ 1172.780397] 9pnet: Insufficient options for proto=fd [ 1172.795321] selinux_netlink_send: 29 callbacks suppressed [ 1172.795350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=67 comm=kworker/1:2 [ 1172.803213] 9pnet: Insufficient options for proto=fd [ 1172.810809] FAULT_INJECTION: forcing a failure. [ 1172.810809] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.813422] CPU: 1 PID: 19102 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 1172.814921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.816689] Call Trace: [ 1172.817259] dump_stack+0x107/0x167 [ 1172.818048] should_fail.cold+0x5/0xa [ 1172.818867] should_failslab+0x5/0x20 [ 1172.819684] kmem_cache_alloc_bulk+0x4b/0x320 [ 1172.820643] io_submit_sqes+0x6fe6/0x8610 [ 1172.821553] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.822623] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1172.823656] ? find_held_lock+0x2c/0x110 [ 1172.824534] ? io_submit_sqes+0x8610/0x8610 [ 1172.825466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1172.826520] ? wait_for_completion_io+0x270/0x270 [ 1172.827552] ? rcu_read_lock_any_held+0x75/0xa0 [ 1172.828540] ? vfs_write+0x354/0xb10 [ 1172.829351] ? fput_many+0x2f/0x1a0 [ 1172.830138] ? ksys_write+0x1a9/0x260 [ 1172.830961] ? __ia32_sys_read+0xb0/0xb0 [ 1172.831825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1172.832947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1172.834063] do_syscall_64+0x33/0x40 [ 1172.834855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1172.835943] RIP: 0033:0x7f7d176d5b19 [ 1172.836730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.840605] RSP: 002b:00007f7d14c4b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1172.842234] RAX: ffffffffffffffda RBX: 00007f7d177e8f60 RCX: 00007f7d176d5b19 [ 1172.843759] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1172.845272] RBP: 00007f7d14c4b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.846793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1172.848299] R13: 00007ffcef364b7f R14: 00007f7d14c4b300 R15: 0000000000022000 [ 1172.915280] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.000320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.019970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.031318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.137239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.148710] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.167924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.174313] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 [ 1173.210876] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19095 comm=syz-executor.4 VM DIAGNOSIS: 02:53:10 Registers: info registers vcpu 0 RAX=ffffffff83e7e9a0 RBX=0000000000000000 RCX=ffffffff83e6657c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7efa8 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7e9ae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f981d61678 CR3=00000000090b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004186a67f80000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e7e9a0 RBX=0000000000000001 RCX=ffffffff83e6657c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7efa8 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7e9ae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fae3ac33010 CR3=00000000090b2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000e02fe016c6c6f502e726567616e61 XMM02=61746f7420636578650a0a0100010101 XMM03=6578650e006e6567206365786508006c XMM04=6578650b006574616469646e61632063 XMM05=7320636578650a006567616972742063 XMM06=7220726f74756365786511006873616d XMM07=75662063657865090073747261747365 XMM08=6e6567206365786508006c61746f7420 XMM09=6574616469646e616320636578650e00 XMM10=650a0065676169727420636578650b00 XMM11=756365786511006873616d7320636578 XMM12=78650900737472617473657220726f74 XMM13=696d20636578650d007a7a7566206365 XMM14=6e696820636578650a00657a696d696e XMM15=0000736465657320636578650a007374