87509ea626e59f652b9c478c395e3c6f288d6ad132860a5aace965c6472b99becda22e1033cb8d8fda4f5cdeaee955f4769cbfb037ffa2186c73e3cf81076352ed382484c96e48b18fb771844b11fee0683395", 0x9d}], 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:26:22 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 335.420505] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 14:26:22 executing program 5: syz_emit_ethernet(0x1357, &(0x7f00000015c0)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0xd, 0x6, "018b7f", 0x1321, 0x2f, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x29, 0x0, 0x1, 0x1, 0x0, 0x8, 0x66}, @dstopts={0x1d, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @enc_lim={0x4, 0x1, 0xa3}, @jumbo={0xc2, 0x4, 0x20}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}, @calipso={0x7, 0x50, {0x2, 0x12, 0x3, 0x0, [0x1f, 0x0, 0x23, 0x6, 0xc5, 0x4, 0x100000001, 0x7, 0x2]}}]}, @hopopts={0x2b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x79ed}]}, @srh={0x73, 0x8, 0x4, 0x4, 0xfc, 0x50, 0x1, [@private2, @local, @mcast1, @local]}, @hopopts={0x0, 0x202, '\x00', [@generic={0x20, 0x1000, "147dfab2fd4827d5b9a29e1ae3b043c12441f86785a69e78ff5c5f1b414fe322c1211aed27e691f248bf399c6f55289e5076e9a3e3e3191de549eaf38e7712664b5cf498f62f0a6b45f1c07bbc0264bfe5184e69e803d4194c9b5dc0e472f11336f8c938fc1039c9b88c559044487939cb2a4a169ab737752ca6e3ac70fa6626c9e1809926367ddf87acce79870add0224c83f188bbdde0362379d7ef58202635496a21fc878338aa334dc7d64ecc30519ec7d5c199f5ad1b165e878d7c432b6832381829f99ead648a401eb7c03bb579b3b072e477023d6b456b1f33875604dfe1f03b176933ff81061c78c11ecbb699aedbed3de6316531ea7a8c8da04f28bb69ec95a16f5faf1058a602b70ded3ad5c1963937bbffbab1a62cabff3aa98384e11444af84477cf1dce82f1b353af5279574e85f1b8798c86e2311b204df0582bccafce846c725da42abf3d2373de6c966c29795af7f051b0850d539e619f463386577c8dd64493b833fc08e3f1bb9f1f10a5d7df57f60885be3f5b282f5c957460cd5a190c9b3b76b825c531e9e03f815c2218e0a0192e471086ab0be47b5ba0dce5fbdefa16640bfea183550068f848981aef470fe2f7c1bce8d15ad06ef3d589baa39873a26936ee727e6a246af0780e29d74fc26a6edb8b355fa292c504ea96c2c76baaf43332c2a10712fdbf88ce925f6b51ef25bb41a98b888b615a7a32f5e2b43c85459a996f7513658f0e62afb49007ac031eb7d32099dc5f6c6c9a44dfe2e7fb04aa1ff6a982cd0417e43cf8398c6853a9fad6970b691fe2f7c23b21f9503dff834fbe3c5accf8d927b63aeff33f5eed945c34c0b99770ee7f03f3ea911f27c282cda9f44ea0f004e223c3882ceddd232b4e43ef184e3d58c7147cc03afdcdbd71493ec7bf5bafb150cead0c5e03b13e3329818561abb43d44502b9b75f51947ea0b5e1f078c43ae6fa36074ef46cdfeb213630069be85f646139ef012d0170081d99a84164c2c19d409391e1fa0555bd0e9ce0f1a9be278d04a33d1f8a7500ecda2f11aa904bc6a7f95e9cd2aae4e8549ad566bcf41978a1560131e71b128e3847ac9ef1d26ef744e677467b051fb539757f60082e84dd89845918531372fa197da675bd40b16e01ac408d64c0e2a571fdb5e76a79dba426565e35cfbea03fb93a20a375e987b0b9d605c29e0cd2ea115d66e66e422a6fcccb26dd8b84d5554e78562bf20e5074fc22d5f0d4d249ae6bd2ee70cbf0d939b9d1a71d4cc77e6219bfa6b12720a0290081a8dd40ebfef8537fecf21f8da7bfda1a8f97abb2c881db191ceab459fce271cb0e698c5ef5011383cbce42d5b2aa44db5d7e6cb6bd3a34245cb96fc72a277b1e533af96e9b06ef6895f59c372755c766a7e99eb7aba61f70b608735e0cdcc590fcb8ff41087f027fbea02a0550fa1e5db35c6b3258d489caeb8550c529797f30da8ac3960f838c57b3b85d7ee81c0e2423cfd2254ea6ff5018de5720052714288bda0af0986f20c05b5f29034aea8a61fae9e981379d44c530d2117afafb702ed3475bb663cf2214fe4b3c3e624dc661893510b940ab4e6af70dddcf888350a2e622168c0fa59739f588259fd4474bb5d713eef35209f90dd24918f8c12ab80d913aa6134cb901c7191777b91ecf952443c86244cbf72d5f53a29edf1b4a3b4db98ecb91a1a1c7ae5518742b58e4e2a0f9a78b7ecb1d3dee2310a851e5f0dc7103d03d4a88ffff18535e4e53acb698b2ea56ead63a722b734501eb47224c52a2376dc9d9db8ed8b7891c132e91d111c84ab41850e5872fc861bf28ee3047f44454f240d80243f5cffaf22139148ddab92febb7d5160791160ff52d2040856ca1b605c9d77afba58c410a880557923bc765ab548ff175395fe205ff74d9e2d3d8fedd94de799c381a3bedc62af39c418160ca526e34ac06dea3e01dab25b7344da7f43a306e7a10bdcb0f2c629d0207b9cb4945898629233dbfa2d8e6fde5f38c333bd4c198d407aef53cb2e4acf771063360e95642f5e3226a9f00ff69d8959af6d1c5453edd549435c1f4b94ee805521b4503a0e6f02a2dda5726c4a04507b8a1ce89d52d36f01c6eff11818b9fd2738e5097bbaca2afa5c98a7eee7cad3831802b42e9ce9de20865549f9306fc56e239e320926bb697e5924d661011039c1031d7031d51f91afb86b484db88851341c2c1a90e02466852896ab94b508fac3df4194a42ec0560371b9c3c447607ec049b54cd657d8a6c6b84b46884d21d23288064fc6d0f03f4f8000c1b407ee84087356a0feda2f35723af8ca2ff9472dd1c1c246061f1c103ca87016f05c733db580d7a1978e75dca299c122f2189b13a9383d639ddf8b6e97e8cd8a613c17847fe661ccd1c6eed99488106b7add01d16545d8f175d15750ad16da6cd734d303a1ec0178b05e07d384b9213817d4c9f9afb8421d113568e3a1fa60fe6fb1bec0aeedc80c1dbdf1634c25577e7d2bc339d63ae3463d464ae69b8cd41339dae01d17bf9f2700ed0fbfd45ab0433baed324a10610574d2442364fd0e1678cef503b485c7bd55ce2a8fe74e1c3f166adc64f62711f00c31fe015ecbb0c7be55f1f9429694deef84c50778b538f6e35e80d8aa2362652e98f45641f577a7e2fa55e3e57ddca8b5d1f43ecc66a728ea5b98633c95797632123198b34215c0c5c78d7f2bfd07c409766992d703bfa421af9b23e5916dd75194749cea1b34142776b3b578903ee8563b532216db848c5d8006a55146cc0aeb36a8a6f7d5264731ab4a11ae771ebffd5bf92c43bec18b51e32a717dd2130a47e970012b034abe761e8f44595634c9bb674c79bbe9b27ee6e4e10f683e1aa1526aafe6c52a0f086c84da2d49d0c4979ab6ca47d0d447ce40ad6643acc84dbf37aedc25802307afcd7292e294556574b66bc26e513f5424db19040ccc5654418272f51a9c463d2db0920aaee88487b9aba8e49da728463fa63b032a3ac2c1d7b8be22a70fee19d899ea5ae7bae40682f78a5f9c4bd432edc7f3fdf2042744efb607db1f2a432b3bf472d0bbb4ff572284445899fb3cbcdf0c265739ad20164206e57bd9c9e2afebe8a7a7773870f63b3ccf1ee0f86ecf9c990993e6ee09053b45553f582a16d79fdcdc68473c86b0cbe89e39ffdaa751d946c61e273dbaab7f11ff1cfce6dab020911926f5d98b5c2c833f474a3ac72579efffdfb9d7dd3c6ea7a41e25f848b26892a86d38fdde5ad7cdc148492f4630c6b63ca1f081975febe4b02bd5294e8b05418ddda0627cdfd8c5281c14711236891d0a122dee187736881ce9fc7e073f3b2ff6f51eeb98e7262d619939ecf1ce25007cd5a81286b8eb8e10574e56646989cd544cd4a634c531e699aa1fecbae24d83771c95082be97b553bbdb48949eaabacbd07a287dbd49aade097b25d36723196d0d7c6d2c6ff63647245b765ac047b250e1f99c031ff05d6cbecf49f02e9834a7970519a9ad614d4311560d67016a296fefd8954caa1bb1d4983fbbec13fb1eb653fa4dcb60ce2ee1a26fd41e06817a0c4454a14457ea4f58b81f400967ee1c02c4d0c974752adc0f7cc21557edb4ce0a3b5585a16b5829a0ad624f17cc51fe8995dbe8fc9d9461e6678401e558d6262005e407790575d47dddc7f83ead9dcf86bff4b82758727b235294717cbd0bca7ac4e6b8412e2329dc48695d63086162001066d5d064a3980cd485e63fc0a3ab9eaaa2f78e72e53a2585838229e32ba273397f9acf3f40cd0b2cf3a32f45aafb02669b0fa6d90afd727aa1ef3dd7ec5c4b0c9c3f8dc2d671da2fb24089a6432d3a18fb05b6a70ab1c491fecefbbdbaaa638385a6c8219b7b3f972ece2a8eb837da5613b35912dddaf23cd5135195ddea684e0f1a0a9aa57c2e858be4ed9fd3424cc10e49433d8812736b42239febf743df7fdf26a2a97858a61655be6a082678977a3757d8d729f7cefe8c490251b7456848aa3515f420ad7d952f03bd91c91ec50d08a353095c1d4485642e7703ed43880279c0b231f694c64dab34a441b6af62f61d8d6dea20a57098f540e3d35b0bc77661638b08189e6bbfa8eee989918ce8d49f43bb7de080ad916779494b2b0776bdb2bc6c8c30303de3d8176ada37437f4d3fa767cccb924fcc7305c797d77b9c24447c961a428bcb124181623189eccc9cfa56cd0024ac8a6dce815d6bf64afb949924714560ebb639766514935a8fef31cde9f21b3f0416e096f97d4e67efa9a4a69572f1c83196ce846ab2fc4fa9bbe3768dd754458385aaaa5f4c10b94050c82f3bb93a73d036cee19ce3e69e4725d91ce3469306e517765f45ed033dce109d93e1053a246c08240bf34b6d7a263440def7df31a6f446bc501c17b8b08072c05bd30421373ec0b35a8335f87dfa87dca4bd179c804e4de58db59c925eb97332bf910298c62f2232ae4c2e98a265471dfb03cfe332b84bcd0fc0ba3b881b21c3bc9ce14fdfc6e832924dd21f714c0c5bc42cc1e260ae0d04dc17c408a9be03740567ffda48efe4e43ef0c3d262513f82dc85abba431fd33570a489c4948afc3271cbbb719931810f540d41011794f49d8b2796567f867139bba0494035cdc96ecb9d2832e94b300a84c53f2749695544b34d6e7cef3aab38bdc2419f589bb55823044faec61fb338eb33058f3df3584bcee5e3c3eb3762359cdd599d9102caab80e404e10e467c454489d4a53a17242350edf3e21517a9de375d892857e375445ae89185add57ad1a13ebbeafbfc41810a9f108d34aaa902d6f96e2c3c5d7a6603466690f52764a2a4f8bec20af533ab8a98682c8f942dae7cb09de6de0aaef15211f8f091af4e7bd1cc5184594e282a670fa53d6d234c4c610950bf63fa4e861b765db87626fbb93980587bb70bb4200173521f7fb888da2522c41ede2ac7a1e6688dc458aede7c235a2e1b517c5e9c762d499bf246c2e8889d586d088e52a75af8b4c786bc694951267a8183b51b09153369f4c53918a40f4c5d16a3e68e99c04a67b007ba4decb920f4ca8b2537b0aef104735a508d82ba499ffcda3987f2703f2a44afa171d99bb170b42d80339894720044e62526133fc1d73b95e3bccbb9c2dfbc13ace52d48ea59d9d212c6ecd1323dd70932802430ed4f742b4cc570bcc3d9845e6b798b9fb9e00d736237964a4ada6d750c9dc4e892fbfb901b92c78c8fd38d9998b839a1c71d180c124a8ce831429ee4d86c9e98e9850204cc0e84fd6c30dc7c2ed7a7cf9602ceb9ead7f2433313de06c30c896fd512b6352b3e74b1040b194fa1eb362753bb66842547c3a4b64bc07da47cee3cde95b63673401a38587c2862da7954365bbdcab914e917d31bda157594c14560152e243f86292170140db1e4a91d5695d21ebf68e2696b1f6c04abcfdbf0bd9143e488558757a97b69639ea4dc60e18ffc4bb791ced6131a0695aaca20db2c79e5f1a681f6effe35bca5ea8f172fabd87ee921a4ea276f18273fcef7bee4a3f08989b274876beaf020e003f7bc6a6c58367c8d6884979356a087c4bcc0a01568f957720f3e0db77b4e2ce9b3f252e14dbc373513b53ee3b58072e8a54276f0972af075fb8256a5757ab6ef735ea90ddd53d381fe454d18230ef965872630aea13ec23f2b3351db39aac309066b66b1812d981dac69d6c90d1a319bad7d5067e7c5399971321699d49ca6dd6fcb204ebb8e63ef055f9da82add96ea4caf26da5e861a20c5089b058e30d3513c714efac6b891e62ff4a72b94c3348d6a"}, @jumbo={0xc2, 0x4, 0xfffff31a}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0xd6}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x9f, 0x0, [0x3, 0xff6], "b16a23a8bc3ff735958c073284e8ba7fd8468944ab9dc3e45415d7ac3819dbf5943b54843e24b6f83257c6f07608d281e436662d993cc7d9ad85f342d6a22a7b92120ed90592a325f7cc19cf80f8a6943c85958b70bfdbf104c288c16e27d7b251c022f383dafa2cc8fecdc3b60adcfd9258d000b1cf68814b35a163ca9b2513173816a32f4e437c2929383e306258e0a8ca3366b7f12f05dd46abbcbfffcb"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x2, 0xd960], "0fda1449fabdd0d86fc6116e685930a0dc832f56a3ab9634c0762231f328051e6dad00d69d94f2ac7694aa45ce5c2654ed67305ebbfb443cb323682ffb494ce6e343b02779ca428117a6fb85be71193e51951441fe511216f5fe6f709da454be2aa82279013ce1a86da99d2f56b4833e933817b466ce2001afc4269c03900e682bae57425a1322b87f2e7ce2410c5fcf66222a3e84dd118c469cb7413f9820e56234"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "db1177b9318365570cab64c24f1870161ac8bff45b74af1a45ea51fcca2b68857d0b7ab23cde7722e5e3cac94e0da9574e1c1f7bd8c9026134798206aeea5fe9460b0bc28ead092c07a90ec0423849d2f734329f80075c773489fcab15467b"}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x81, 0x1, 0x0, 0x0, 0x4, 0x8}, 0x1, {0x460f}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x8a, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x2, {0x764, 0xff, 0x3, 0x6, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "a6184ecf3b29f918f82ceb78f017f2469d7a7c"}}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000010c0)={@val={0x0, 0x883e}, @void, @mpls={[{0x8}], @ipv6=@icmpv6={0x7, 0x6, "6bd4ac", 0x221, 0x3a, 0x0, @local, @empty, {[@srh={0x87, 0x8, 0x4, 0x4, 0x8b, 0x6c, 0x9, [@mcast2, @rand_addr=' \x01\x00', @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x88, 0x12, 0x4, 0x9, 0x6f, 0x50, 0x100, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1]}, @hopopts={0x33, 0xc, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x700, [0x63, 0x3, 0x8, 0x100000001, 0x3]}}, @enc_lim, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x1000}]}, @dstopts={0xff, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x497b}, @enc_lim={0x4, 0x1, 0x7}]}, @dstopts={0x3d, 0xc, '\x00', [@ra={0x5, 0x2, 0xfead}, @calipso={0x7, 0x10, {0x0, 0x2, 0x80, 0x7f, [0x9]}}, @ra={0x5, 0x2, 0xfff8}, @generic={0x7, 0x47, "f4c5acd38c90f3ab3656a659ca49348a4320520a11059bea792d737503670fe8f385c19af622d7f9b86c481c6056c0c1cf44018292f80d76e8bd463c2c09050578a22024747330"}, @pad1]}], @ndisc_na={0x88, 0x0, 0x0, 0x80, '\x00', @private1, [{0x4, 0x6, "3eaaff2ee7428fa5457d09327e1badc79517724fcb5a1ae4758b0193bd501acb19858b68d011c5564777d399988e7c"}]}}}}}, 0x251) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x0, 0x4, 0x6, 0x440, 0x7, 0x5}, @ipv6=@generic={0x5, 0x6, "915b93", 0x1078, 0x6, 0x0, @mcast1, @mcast1, {[@routing={0x6c, 0xa, 0x1, 0x1, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}, @dstopts={0x3c, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x3}}]}], "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"}}}, 0x10aa) [ 347.679161] kmemleak: 31 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:26:43 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:26:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, r0, 0x1) 14:26:43 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x179) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0xfff, 0x8e) r4 = openat(r3, &(0x7f0000000140)='./file1\x00', 0x40000, 0x80) bind$bt_l2cap(r2, &(0x7f0000000500)={0x1f, 0x0, @none, 0x6}, 0xe) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x6, 0x7f0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x100, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x7fff, 0x4e22, 0xff7f, 0xa, 0x0, 0xc0, 0x3a, 0x0, r6}, {0x4c9d, 0x9, 0x7, 0x668, 0x9, 0x1ff, 0x6a05ed8b, 0x4}, {0x100000001, 0x3ff, 0x80000000, 0x2a79}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x7, 0x7fffffff, 0x7, 0x2}}, 0xe8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000400)="00c4247e3b820eb8dc9953a97ce17daf8eec68c6b34bad394f2edea9ddaa06708424851796dff8715f312e78463c9c48e17579f2772ae6f5c479198c76f2b05dde230c4de386ae9a058ba29398d02ee85f9546fbd2413954dcf8652c9b77de2e371b0a309cf849c1f8a7a32f9d905dcba80f364939d90fe284ad8ec5452f651a6a6bb2b4a5ccb4dda0b975ca5bc4912ced1c0fef8d3e13c40d2ea8b9f538bf0a233ad922272c20632a893d98f024cac81e2b663057a5094c5d9a5e49bfed398291998ba24dab7276d692ff5a846775ba26ae41be5c5d41afbce532035473990d51a9817d8260a7e822b53d0f3ced2a644e9c10", 0xf3}, {&(0x7f0000000540)="6be8f3882a6bb7d5452735ed68ca902d35596175f6cb8b624c8eec02e3e5773f00517f54dcbaff14792b68c4a5dc83b27f82bc585039e3f32c30cdef9d438b3fcc39d201a1f603888a8987509ea626e59f652b9c478c395e3c6f288d6ad132860a5aace965c6472b99becda22e1033cb8d8fda4f5cdeaee955f4769cbfb037ffa2186c73e3cf81076352ed382484c96e48b18fb771844b11fee0683395", 0x9d}], 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:26:43 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, r0, 0x1) 14:26:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd6096153f00303a00fc0200000000000000000000ff0200000000000000000000000000010200907800000000600009e60000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb00000000"], 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001280)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x9, 0x2, 0x0, 0x5, 0x2, 0x1}, 0x9) write$tun(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x1f0) clock_gettime(0x0, &(0x7f00000007c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') pread64(r1, &(0x7f0000000000)=""/4098, 0x1002, 0x1e00) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x1f, 0x40, 0x7, 0x0, 0x7fff, 0x40, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x10203, 0x9, 0x7e6, 0x4, 0x7, 0x2, 0x3ff, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x0, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x20010, r1, 0x5) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmmsg$inet6(r2, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x2, 0x0) fallocate(r2, 0x1, 0x5, 0x0) 14:26:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00000000000000000000080000004d6ea7baf143f30e269a55049033d80f187f20534e7c15419e4f8df94a1d27fa3b3714a2975b84067146299ec100d0cafc242b27a2c93a886d80f64793496c19c86b1d09c4ebae8cdfdefdda86ff7f8db448e80c6e3987b8bc6a1402d51b9d63189656bc960c10d0b9f9bf850214cc00349497ee0cc0dc56ef76f795fe6913feafdcbbc816e625fb9295facff440dc01f0ffff95d81833f2565f4a00"/186], 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmmsg(r2, &(0x7f0000001340)=[{{&(0x7f0000000280)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="a5", 0x1}], 0x1, &(0x7f0000000480)=[{0x10}], 0x10}}, {{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x5c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8b}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xee}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) 14:26:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x6c2fb2b8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) openat(r2, &(0x7f0000000000)='./file1/file0\x00', 0x20a002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file1/file0\x00'}) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000680)) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000940)={0x4, 0x2, {0xffff, @usage=0x80000001, r6, 0x3, 0x8, 0x9, 0x4, 0x9, 0x8a, @usage=0x100, 0xfffffe01, 0x10001, [0x5, 0x2, 0x100, 0x80000000, 0x8001, 0x16ae9c93]}, {0xfffffffffffffffd, @struct={0x3, 0x7}, 0x0, 0xffffffffffff8000, 0x4, 0x20, 0x357e, 0x7ff, 0x43, @usage=0x6, 0xf3d, 0x65e3, [0x50000000, 0xdb8, 0x5f8f, 0x85c, 0x9, 0x1]}, {0x9, @struct={0x624, 0x2}, 0x0, 0x2, 0x0, 0xff, 0x8, 0xffffffffffffff00, 0x44, @struct={0x8, 0x3}, 0x3f, 0x2, [0x5, 0x0, 0x401, 0x6, 0x4, 0x3f]}, {0xb60, 0x1, 0x4be6}}) 14:26:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="a5", 0x1}], 0x1, &(0x7f0000000480)=[{0x10}], 0x10}}, {{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) sendfile(r2, r1, 0x0, 0x9bbb) [ 356.745637] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 14:26:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000001840)='./file1\x00', r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001980)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000001a80)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0xa, &(0x7f0000001880)=[{&(0x7f00000001c0)="a698bdd92a11e9700122df39cc75dcab89000a3c48aac7e20adc603306392e465fde0cf9a5dd58f3d8222a8765897fc464ff6f8a42103d83d1f85e32b6111bf1b6c6011d4165", 0x46, 0x3}, {&(0x7f0000000240)="f61595a62eca98c7fa8d857ba99b639f9c8028c05310490852b0ada86e7102b954bbde23a89a11a2913e046ff0f7425eea244ce62b264272c0bde7b8e32f13fe6e18174cb17274502a1e41b667976fe457b1f54cefa75247b1f3abd400333c617d23b3a9ef4729351a73e1af93fd4c766bbcc154f95c0691381b665dce2cc8498921", 0x82, 0x91}, {&(0x7f0000000380)="91680d795c214e4f0ef1abd4b983e7a79d6d643fec72faaa4d11ec9843f6383378f3ac0e3c43a4b9497aced0ddd6931c355fa99f6f86a674990c590c320676932551baf59162420f13a9748684c657263beb52b6c84234094c75b0aa60e0d128170e74dfab8f8d47500b2cc24cd971654ae9551abd0b1a00fb667258b77a3839081ed883881106034914bf0a82a790e516b6f365a8bad4e4700580e40842e7693bfa612dfc6e3107bd2bf94f65f7b990831cbf0bbf6c5bda5dcfdc5ac12eea7fc9828b763243ad08134483850f600258a72744b0f34e6e93c7719732", 0xdc, 0x9}, {&(0x7f0000000480)="9056dfc81d4c8116ee90916d5ecd646659530563dc45381f4d4e8bb99e86e42e5dbf3707c6f47e95b43a689c9741a857d3f0b4225da46faa9708c8a301033eb6ed5d", 0x42, 0x9}, {&(0x7f0000000500)="dc4db7bf9c623cbea6665dd22e06ea1f021ea6f38867632fdd3d5ee5c346883d5c797ede33dee71da3c86debbb693f5eea81119c09647bcdb758730aab3ccd3041bc98c98d69e9f8716149b6f99eb00d38447d1b55ad2c44832251c199b83f9c6aa0ea395be757a5f965bc8f04535007b449899bc177eafa9ed60134c37dfe25c26136c08b6582c7b67c3395072db53c60a27b8a89e14f761cda5d12a05eed1ec01fab9b791e5c0e6c48d95436dedc4b809ce67d02438be34c73762ee6d8baa084647fa1de82e7fce511bdebc5e793b880ce96dd4fc4a6c543775149086c7a910e0c737182b6f82cccd74f537867", 0xee, 0x5}, {&(0x7f0000000600)="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", 0xfe, 0x5}, {&(0x7f0000000700)="e06398fcec0247e1b1517a42890a89993571e0e37d76c4426c845c45c7d1f7329effa82784ed3d76aefccbb8f302b78d3f6deaebd85b0710bc0ce8f011efe4c1c5336a60bda59a682998b99e1448f8604ebbeb86fe47c185d32cedc05b0166bdd251f39285b15fdf398b73f8f91e8c99e74a991be772ad8abf", 0x79, 0xaec}, {&(0x7f0000000300)="553021ec22be67ee723380b17526303a79d7c456dfa97a2902e1e40bafdd8b8b76a4681a9f5d17b8b8f8b68f9ffabd225240", 0x32, 0x1000}, {&(0x7f0000000780)="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", 0x1000, 0x2e}, {&(0x7f0000001780)="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", 0xfa, 0x1}], 0x1000002, &(0x7f0000001ac0)={[{@huge_within_size}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_advise}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'default', '', @void}}}], [{@uid_gt}, {@seclabel}, {@dont_appraise}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@euid_gt={'euid>', 0xee00}}, {@euid_lt={'euid<', r1}}]}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat(r2, 0x0, 0x0, 0xf4) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0xff, 0x1, 0x4, 0x0, 0x0, 0xff, 0x2000, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x8d1, 0xe, 0x7, 0x0, 0x7, 0x200, 0x0, 0x80000000, 0x0, 0x1e}, r2, 0xc, 0xffffffffffffffff, 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x20000c0, &(0x7f00000000c0)='\x00') 14:26:43 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="60706f767c12e4b3f4b95a186c3d7072656665722c00"]) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(r0, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) 14:26:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, r0, 0x1) [ 357.064360] tmpfs: Unknown parameter '`pov|ä³ô¹Zl' 14:26:43 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 357.076916] ====================================================== [ 357.076916] WARNING: the mand mount option is being deprecated and [ 357.076916] will be removed in v5.15! [ 357.076916] ====================================================== 14:26:43 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00", 0x0, 0x403}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r2 = fsopen(&(0x7f00000001c0)='nfs4\x00', 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r2, r3) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000140)='cpuset\x00', &(0x7f0000000180)='M', 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) read$char_usb(r4, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@random={'os2.', '\xf7${:\x00'}, &(0x7f0000000240)=""/35, 0x23) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 357.125907] tmpfs: Unknown parameter '`pov|ä³ô¹Zl' 14:26:43 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x7ff, 0x0, 0x0, 0x0, "aab39fd5a2f78eb22e0baabb6b0541c5de83c6"}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, @can, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, @phonet={0x23, 0xb9, 0x51, 0x8}, 0x7, 0x0, 0x0, 0x0, 0x81, 0x0, 0x51e, 0x7fffffff, 0x88}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x8}}, 0x0) r2 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r2, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x40, 0x40, 0x0, 0x8, 0x0, 0x2, 0x2200, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x8001}, 0x800, 0x0, 0x0, 0xe, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x1}, r1, 0x1, r2, 0x8) writev(0xffffffffffffffff, 0x0, 0x0) 14:26:43 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0), 0x17, 0x10001) fallocate(r0, 0x3, 0x0, 0x8000) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x78) 14:26:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="a5", 0x1}], 0x1, &(0x7f0000000480)=[{0x10}], 0x10}}, {{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) sendfile(r2, r1, 0x0, 0x9bbb) 14:26:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000240)=@proc, 0xc) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d00"/20], 0x14}}, 0x0) 14:26:44 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'wg2\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz1', "444830d1cbfc32331766e65a16b731aed8a0cdff840a28e307e12c2dca1719a281c71498f4ee7fe3bd582020442763b109c35956b70966b71e5ff8b38ac7dec112a1bcb1c5bd"}, 0x4a) dup3(r1, r0, 0x0) [ 357.660075] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 357.720554] tmpfs: Unsupported parameter 'huge' [ 358.143035] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 371.685480] kmemleak: 96 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:27:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="a5", 0x1}], 0x1, &(0x7f0000000480)=[{0x10}], 0x10}}, {{&(0x7f0000000740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) sendfile(r2, r1, 0x0, 0x9bbb) [ 380.794634] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:27:07 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:27:07 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) unlinkat(r2, &(0x7f0000000380)='./file0\x00', 0x0) openat(r0, 0x0, 0x220000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200, 0x153) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{}, {0x77359400}}) copy_file_range(r5, &(0x7f00000001c0)=0x9, r3, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x507, 0x6, 0x6, 0x7}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000340)={0x7fffffff, 0x30, [0xfff, 0x0, 0x1f, 0x80], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x200f5ef, 0x0) 14:27:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, r0, 0x1) 14:27:07 executing program 1: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f000000f000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0), 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x105142, 0x60) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 14:27:07 executing program 7: creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x17, 0x10001) openat(0xffffffffffffffff, 0x0, 0x80001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x301000, 0x122) pwrite64(r3, &(0x7f00000000c0), 0x17, 0x10001) renameat2(0xffffffffffffffff, 0x0, r2, 0x0, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x8801) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) sendmsg$nl_generic(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x2f, 0x800, 0x70bd25, 0x25dfdbfd, {0x1}, [@typed={0xc, 0x8b, 0x0, 0x0, @u64=0x7}, @generic]}, 0x20}}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x10, 0x2, 0x6}}, 0x14) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:27:07 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x179) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0xfff, 0x8e) r4 = openat(r3, &(0x7f0000000140)='./file1\x00', 0x40000, 0x80) bind$bt_l2cap(r2, &(0x7f0000000500)={0x1f, 0x0, @none, 0x6}, 0xe) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x6, 0x7f0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x100, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x7fff, 0x4e22, 0xff7f, 0xa, 0x0, 0xc0, 0x3a, 0x0, r6}, {0x4c9d, 0x9, 0x7, 0x668, 0x9, 0x1ff, 0x6a05ed8b, 0x4}, {0x100000001, 0x3ff, 0x80000000, 0x2a79}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x7, 0x7fffffff, 0x7, 0x2}}, 0xe8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000400)="00c4247e3b820eb8dc9953a97ce17daf8eec68c6b34bad394f2edea9ddaa06708424851796dff8715f312e78463c9c48e17579f2772ae6f5c479198c76f2b05dde230c4de386ae9a058ba29398d02ee85f9546fbd2413954dcf8652c9b77de2e371b0a309cf849c1f8a7a32f9d905dcba80f364939d90fe284ad8ec5452f651a6a6bb2b4a5ccb4dda0b975ca5bc4912ced1c0fef8d3e13c40d2ea8b9f538bf0a233ad922272c20632a893d98f024cac81e2b663057a5094c5d9a5e49bfed398291998ba24dab7276d692ff5a846775ba26ae41be5c5d41afbce532035473990d51a9817d8260a7e822b53d0f3ced2a644e9c10", 0xf3}, {&(0x7f0000000540)="6be8f3882a6bb7d5452735ed68ca902d35596175f6cb8b624c8eec02e3e5773f00517f54dcbaff14792b68c4a5dc83b27f82bc585039e3f32c30cdef9d438b3fcc39d201a1f603888a8987509ea626e59f652b9c478c395e3c6f288d6ad132860a5aace965c6472b99becda22e1033cb8d8fda4f5cdeaee955f4769cbfb037ffa2186c73e3cf81076352ed382484c96e48b18fb771844b11fee0683395", 0x9d}], 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:27:07 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'wg2\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz1', "444830d1cbfc32331766e65a16b731aed8a0cdff840a28e307e12c2dca1719a281c71498f4ee7fe3bd582020442763b109c35956b70966b71e5ff8b38ac7dec112a1bcb1c5bd"}, 0x4a) dup3(r1, r0, 0x0) 14:27:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, r0, 0x1) [ 381.201565] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 14:27:08 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x10000, 0x179) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0xfff, 0x8e) r4 = openat(r3, &(0x7f0000000140)='./file1\x00', 0x40000, 0x80) bind$bt_l2cap(r2, &(0x7f0000000500)={0x1f, 0x0, @none, 0x6}, 0xe) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000180)={0x6, 0x7f0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x100, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x7fff, 0x4e22, 0xff7f, 0xa, 0x0, 0xc0, 0x3a, 0x0, r6}, {0x4c9d, 0x9, 0x7, 0x668, 0x9, 0x1ff, 0x6a05ed8b, 0x4}, {0x100000001, 0x3ff, 0x80000000, 0x2a79}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x7, 0x7fffffff, 0x7, 0x2}}, 0xe8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000400)="00c4247e3b820eb8dc9953a97ce17daf8eec68c6b34bad394f2edea9ddaa06708424851796dff8715f312e78463c9c48e17579f2772ae6f5c479198c76f2b05dde230c4de386ae9a058ba29398d02ee85f9546fbd2413954dcf8652c9b77de2e371b0a309cf849c1f8a7a32f9d905dcba80f364939d90fe284ad8ec5452f651a6a6bb2b4a5ccb4dda0b975ca5bc4912ced1c0fef8d3e13c40d2ea8b9f538bf0a233ad922272c20632a893d98f024cac81e2b663057a5094c5d9a5e49bfed398291998ba24dab7276d692ff5a846775ba26ae41be5c5d41afbce532035473990d51a9817d8260a7e822b53d0f3ced2a644e9c10", 0xf3}, {&(0x7f0000000540)="6be8f3882a6bb7d5452735ed68ca902d35596175f6cb8b624c8eec02e3e5773f00517f54dcbaff14792b68c4a5dc83b27f82bc585039e3f32c30cdef9d438b3fcc39d201a1f603888a8987509ea626e59f652b9c478c395e3c6f288d6ad132860a5aace965c6472b99becda22e1033cb8d8fda4f5cdeaee955f4769cbfb037ffa2186c73e3cf81076352ed382484c96e48b18fb771844b11fee0683395", 0x9d}], 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:27:08 executing program 7: memfd_create(&(0x7f0000000340)='\x00', 0x6) 14:27:08 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c00467a2fab602ca4dff70b1430d64f4fb390f29925ac2dda65c8e2848c36288a166a75e28d07dd27c8940acbf003a2021646f00118348c39ed61f13d1e17524cf884d6117aa0bc791ac15dec5889cab7fd5de67b2bb9e7c029a38a6878e3e757d9dd74022f0c88119fb5836f0c86cf9a9d46e4c9610b4196a37ae53e3d3de0dbeae35b8502dab88df718253e94f115784b1d3e6823bfc06c238bd4401da71b917f41616aca8651a879cdc855c1a320314230c37b8d606c"]) [ 394.937795] kmemleak: 99 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:27:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) clone3(&(0x7f0000000440)={0x1100d2000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180), {0xa}, &(0x7f00000001c0)=""/63, 0x3f, &(0x7f0000000200)=""/250, &(0x7f0000000400)=[r1, r2], 0x2, {r0}}, 0x58) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@dfltuid}, {@nodevmap}]}}) 14:27:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:27:30 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'wg2\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz1', "444830d1cbfc32331766e65a16b731aed8a0cdff840a28e307e12c2dca1719a281c71498f4ee7fe3bd582020442763b109c35956b70966b71e5ff8b38ac7dec112a1bcb1c5bd"}, 0x4a) dup3(r1, r0, 0x0) 14:27:30 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:27:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) dup3(r2, r1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657263636573733d616e792c009b1f939df33631cdecc11609ccafa4279c11aa1874ebfe940637f3c3b15add267746d3acb712cd9a3a46d302fa52326cafc3063ced3f4244f6a4f95b2e99092738e400c335b6fdea10a9a08a9b20395e56309cd32cd19a3e40f0c819d73d9d9e3825f29d8a59a3da1ab08ff9c7f54c8ebee75dac6cbdee35d27b97437ead44573d876fb3785f49fa48a822a094caa8d44de1686aac641a4a00a21938d8d42a4d7400"/189]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0x4}, 0x4050, 0x0, 0xfffffff7, 0x1}, 0x0, 0xffffffffffffffdf, r4, 0xa) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 14:27:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, r0, 0x1) 14:27:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{0x7, 0x3}, {0x0, 0x7f}, {0x5, 0x80}, {0x3, 0xd6}, {0x100, 0x9}, {0x7, 0x7}, {0x8000, 0x1}, {0x6, 0x6}, {0x400, 0x8}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="2249e4f5f7dd396a925013ad73e03cc52de61d0bb5020978172ced544c8bd0997c3118"]) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200)=0x3ff) readv(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) unshare(0x48020200) 14:27:30 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) fcntl$addseals(r0, 0x409, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x99319000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)) ioctl$TCGETA(r2, 0x5405, 0xffffffffffffffff) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000001c0)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_test', 0x400040, 0x11) fork() [ 403.646457] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:27:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f0000000280)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x802000, 0x0) dup2(0xffffffffffffffff, r3) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000540)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="2729c72b7f49"}, 0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfab, 0x8, 0x1fd1, 0x100, 0x1d, 0x20, r7}) connect$packet(r1, &(0x7f00000001c0)={0x11, 0x1, r7, 0x1, 0xe6, 0x6, @local}, 0x14) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000094}, 0x8000) 14:27:30 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @broadcast}, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x64, 0x806, 0x0) ftruncate(r1, 0x1000003) pipe(&(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002bbd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0400e2000400e20008002201f30200000800a100930000000800270003000000050018012c00000008002201ff0100000800a0000f03000005001801330000000800a500010000000500a200020000000500d500020000000800a500010000000800a500010000003400a6800a00060008021100000000000a000600ffffffffffffffffff00000a000600ffffffffffff0000f557112def4bb0e965c10800a500010000000400e200"], 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xec3, 0x6c}}}}}, 0x20}}, 0x40) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000040)) dup2(r1, r2) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) 14:27:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) clone3(&(0x7f0000000440)={0x1100d2000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180), {0xa}, &(0x7f00000001c0)=""/63, 0x3f, &(0x7f0000000200)=""/250, &(0x7f0000000400)=[r1, r2], 0x2, {r0}}, 0x58) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@dfltuid}, {@nodevmap}]}}) 14:27:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 403.863561] 9pnet: p9_fd_create_unix (4840): problem connecting socket: ./file0/../file0: -111 14:27:30 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:27:30 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:27:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:27:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x12a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x54800}, 0x0) gettid() ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xf) fcntl$lock(r2, 0x25, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r3, &(0x7f0000000200)='net/nfsfs\x00') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) 14:27:30 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 404.183751] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 14:27:30 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 404.283753] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 404.535794] device syz_tun entered promiscuous mode [ 404.553117] device syz_tun left promiscuous mode [ 404.564235] device syz_tun entered promiscuous mode [ 404.589669] device syz_tun left promiscuous mode [ 418.516743] kmemleak: 25 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:27:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:27:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) openat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x12a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x54800}, 0x0) gettid() ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xf) fcntl$lock(r2, 0x25, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r3, &(0x7f0000000200)='net/nfsfs\x00') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) 14:27:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:27:54 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:27:54 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x5) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000006740)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="6e28db3da8f2676c94bd96a612b0b1c579dd8573c1b5a28af0f8bd59278702d6d7214020789762c1664608858a8a4d85f440a9f2ba526ae6", 0x38}], 0x1}}, {{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}}], 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xd7, 0x3f, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfff, 0x1}, 0x40082, 0x6d29, 0x5, 0x5, 0xe25, 0x7fffffff, 0x4, 0x0, 0x7, 0x0, 0xb1}, r3, 0x6, 0xffffffffffffffff, 0x3) r4 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000001840)='./file1\x00', r5, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xd7, 0x3f, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfff, 0x1}, 0x40082, 0x6d29, 0x5, 0x5, 0xe25, 0x7fffffff, 0x4, 0x0, 0x7, 0x0, 0xb1}, r6, 0x6, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)=""/73, 0x49}, {&(0x7f00000017c0)=""/200, 0xc8}, {&(0x7f00000018c0)}, {&(0x7f0000001900)=""/68, 0x44}, {&(0x7f0000001980)=""/193, 0xc1}], 0x5, &(0x7f0000003640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="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"/307, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa8}}], 0x1, 0x83, &(0x7f0000001c00)) r8 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmmsg$unix(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="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", 0x1000}], 0x1, &(0x7f0000001580)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="78bcaa9fa5429cdb4dc62a2ba4e46f12c26e84fed7cbee92a36ac1b3b538c319341809d33d811c3159596bf2fd873aa91d461d8d8806e48ac1094a30a8330518130d353e524769063c0100509da775de0c0f10cb37b366c0ecf17c45ffd6cae40f1e17831a4f4ae69380e89039840addbc134b9fb52a8221adc3337a2d6a5a1ec582c9557a865f8328c067db6b6ef370b5a43e165f66d9650ac62f5d46baa159f382352bd3b62235da84644f428c00dc33b7e1b0abee626df5d19ff937d8e8918782f56cfaa93d235da518010626167f604e3b335fb99cdd995646bc18014f221bffdf2c15e416ee6a82cb4b2e831b"], 0x48, 0x4000000}}, {{&(0x7f0000001380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001400)="4efef1fbc3d6906e3c3488bf060a7d1fa547eafeb93dc506968281ae9bdeda02146118d2f6dad2ec9f82c8412e186b80c5cb80bafc0659f5accdf190b04715c7dbc5627f32881f8b00d725b8a95fd1cdc8919a986c6d934000464015bb593dbc45a3a8b2612f8b46d56920b6e98afb3c76c93df0fbe6f33c7334071560fcb46c557b5186b6e6b24ee4ba5356f252813e9cb6aa0bcf1eb2cc65db41b5498ca38627d5dabaf8ebf103277d426ede5c5314cf14e6d253ccfe4ba5c3cc478396ec36032fd4e18a877299a8af81a3904734bf2f5a38144308988d994a5551bbcc58eb6f", 0xe1}, {&(0x7f0000001500)="7796122d0f244e386cef3adcc33b707056a87c95bf03cd701796805147e223162f510803dece41ab40674d857ab8421f8a6ddd5912", 0x35}], 0x2, &(0x7f0000001c40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100, 0x48810}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000001dc0)="02054642aebd34d1b0de9335e5f51c100f1dc0703d18c1756c710b9a5be27d29b3b868ab09af2a2f25988fd3b5ce042cfcd45d1704037e2f5b080515db32654985f1c0bcd6da6be950041341728c9fa6e50d1790a0b893c4e59315739cfd5c0fc1c72964c9d74661da705f744852d5fa3a221b28470f1610460674486ede4c5de3c2abbf822cf72268a7373573846714d95e5c71e3f0b4512b8d330dfbdf74e260a8f790dc7508a055ae077ca5d7d43ba75783509603fafca611", 0xba}, {&(0x7f0000001e80)="1f328867429a9539baaba7606273ce82cff991ab5592d2c0bf0772fa85789974d5eeaf1d52dfbaa69b033e23e51911deff93c73e5b3188f4dcf45ae9f02ae1f0669e3e8a46fa1f1528366b7a167e893c991c9d4df6e9104be5ac7c7f4fd894d2601fad80182c64e061475731ac486206c3e148e0431ebde6c1f08a479f110a11adf3a8164597bb0eb7c14e5e3e053721a8", 0x91}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="da481b2382b64b521427594ca551f0cce0909caa731c14965e01dc6666b8808f66e9429f88aac2e3d430124445bac0178ff0f4922cec98a1d9e9aaa1fb442d24f64e3e2efd6abce6b834effb01f9ad1de025a33f345cdd66ebe5a12149c26352fed2fe507328862f572657af157df36688", 0x71}], 0x5, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x20, 0x4008000}}, {{&(0x7f0000003180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000003200)="7971dbbd3ae246280b753bfab9b61279dc2e821ada99a6dae1259ad35d8ee493a66975c1a68e84b7e79662687a6b7c03b412b5d8aba406b3b70bc1e671935fff43b5c3d407047bd4fd48e19c57181233f61442afa5141973719ec9251776388908615b809f5a66112cb4c9249f39ac55d90bf65d44f9a34a7f64c3b30c7dbb98aa98db2bc9e97928033dee", 0x8b}, {&(0x7f00000032c0)="09041b4dbe", 0x5}, {&(0x7f0000003300)="51080b4a7cd3c8c24f4a983a0957d2e88b5834b375fe11f06d6b35142b90826ed80eed7b1a504e498d8b0ee39bffe75f71ab144f4f569aa263b4009ae1b02a3f4316b45ea2afd894c6cdbe20196e67d7f853f73b0a1a3df492cb54", 0x5b}, {&(0x7f0000003380)="228c8f59c6aa9b660afb4c569e2c2e6b13f590e416086aa2dedc74204687e6b861b5babf00377a72496d5918c5f52d65883938679f0a9ea787b71f91e090ffcc3f301227390502e12f962f59b5d47cb343e676c70896", 0x56}, {&(0x7f0000003400)="4ff2fc17b37bc1f7ee54f19d6a", 0xd}, {&(0x7f0000003440)="e36a8b1f3e19e98f50f29188627df67fbc9b228a1a8d295df9c3570004", 0x1d}], 0x6, &(0x7f0000003500)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x20040000}}], 0x4, 0x4000000) 14:27:54 executing program 4: setregid(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r0, &(0x7f0000000180)='gid_map\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x500) getegid() setregid(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000001dc0)) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0064d078be00fedbdf2532000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x800) flock(r2, 0x0) 14:27:54 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'wg2\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r4, &(0x7f0000000340)={'syz1', "444830d1cbfc32331766e65a16b731aed8a0cdff840a28e307e12c2dca1719a281c71498f4ee7fe3bd582020442763b109c35956b70966b71e5ff8b38ac7dec112a1bcb1c5bd"}, 0x4a) dup3(r1, r0, 0x0) 14:27:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) [ 427.580100] 9pnet: p9_fd_create_unix (4888): problem connecting socket: ./file0/../file0: -111 [ 427.598258] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 427.653878] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:27:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:27:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x204, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6b}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0xfffffffffffffff7) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f00000007c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x40}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7ff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8001}]}, 0x70}, 0x1, 0x0, 0x0, 0x14001001}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 14:27:54 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 427.817070] 9pnet: p9_fd_create_unix (4909): problem connecting socket: ./file0/../file0: -111 14:27:54 executing program 1: epoll_create(0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000a77cc02a3b3ca1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000df00"/256]) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) close(r1) statx(r0, &(0x7f0000000600)='./file0\x00', 0x100, 0x400, &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/233, 0xe9, 0x1, &(0x7f0000000300)=""/116, 0x74}, &(0x7f00000003c0)=0x40) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="22843c74c30a38512f13565701e98586d6ff7ad800fa2e587064b8e8ca7d1de0024d28a493bfdf2de9b6425f09419e0b4a30437c27b1045c5233610dc3e13c212a247e6e322436685fd535c8886d973c8d73d60b23e6232dbca7354e258dae82d93909e5bf6ad0bed96738838faeec2b7765bf1688424de59bd760ca2bfaf65ca609ce25852c4e80f4611c13fe03273bb879cc4538dc966e", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,access=any,\x00']) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 14:27:54 executing program 7: ftruncate(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_complete(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000005200c5d50022844574372a4892000200"], 0x14}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000100)={0x0, 0x6, [0x0, 0x100000004, 0x10000, 0x400000000, 0x0, 0x8]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) close(r3) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40400, 0x2) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0x6a64) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 14:27:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:27:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) [ 428.010075] 9pnet: p9_fd_create_unix (4923): problem connecting socket: ./file0/../file0: -111 14:27:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 428.180486] 9pnet: p9_fd_create_unix (4931): problem connecting socket: ./file0/../file0: -111 14:27:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x44fb193c9276c6c6}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5020}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1c080}, 0x40095) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r4 = socket(0x16, 0x3, 0x8001) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x320, 0x38, 0x100, 0x70bd2a, 0x25dfdbfd, {0x11}, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x10, 0x4f, 0x0, 0x0, @str='@[!!-%&:&{\x81\x00'}, @generic="2bfa33eea99bb9ee8e443c69d794a6599467789633e9c34ef26f825131adb6aca3aa3ecf5269009e6b61f4cfe61594879aa207e8c700863618e6f45c813e7503327ddc57f30e9ce7fcf952f6953ee9476866874957b8ca3944b23ba8c0ebfad955cf", @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x8c, 0x0, 0x0, @str='\x00'}]}, @nested={0x181, 0xa, 0x0, 0x1, [@generic="6f75cc4ac24ca335dc377c0944f46389c825e1f99e894a90dddeb224e10b4930f07188841486120a69c1065a3db2d5c2fc993ca72410b343eed2be55728afd94d10342ea50ec1f9537c2a7c47903e71709d953b042e29efe8499f431d7e9983459686347fb8c4db9f4d7b3f731589f2a712be43ed3e50f66ec716539c08a2a8bb25b2a13e991720adfa8292199453312318f9836267d77ec80cc1fda40c603ef77515094daa10745c473a71bbbb5814a8db3732d36132034ea5182c5526e97271a0ec0527abc75ad8a375645a753627d2e183707d197aea494eff468a7fc27eac87d89", @typed={0xa, 0x9, 0x0, 0x0, @str='\x02\x02\x02\x02\x02\x02'}, @generic="7f539ca85ee4d2b76a834aa728e8762eb5ef8041517a1b7702cf8b29e52c4bfb431397c6c684a65cb9b0332402ff522946a2a085f7d9ec71d6635a5edfbc396e79485871983ada9cb4a4b7d5486d2f5f869e5b99e459ba0e284b43876edc30ffc3b7545fb1b5c8b9b9ae3d2d9f9df19b6280de0296ced20ec67477ab8dfe17d4c70303e4b7f9", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xec, 0x50, 0x0, 0x1, [@generic="0c2b458471fb90ad72baeb69ecabb18c6b4bb04afb42b89b1aa305290ae06ac0", @typed={0xa, 0x67, 0x0, 0x0, @str='wlan1\x00'}, @generic="d055f76c0e16c761a9128a6e20a8a72710b532893350ef1b6cbc5d7471a82b55fd28566cfedbe5ea39bbec0c4d1e47a1307145194265fbacb27ddef7e06c94e8234200ebbb7e6a0a81c00eddd2aff4658474ce57736a106c7225df7e419182fdde2f2d0befb3727b6c69b53afae9319c79dac6902f5ffa45fab5e5704b337c75dea966fdae32ae233f548ef11d6c67b2605644c626ca0bbbb954b89e7ca2f9948cdcbafabd1d4377630e983b7ae6f35dbdb5baaf", @typed={0x8, 0x4b, 0x0, 0x0, @u32=0xfffffffe}]}, @typed={0x8, 0x49, 0x0, 0x0, @pid=r5}]}, 0x320}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40804) [ 428.334271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.351575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.690799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.701121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.597834] kmemleak: 23 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:28:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:28:17 executing program 1: epoll_create(0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000a77cc02a3b3ca1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000df00"/256]) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) close(r1) statx(r0, &(0x7f0000000600)='./file0\x00', 0x100, 0x400, &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/233, 0xe9, 0x1, &(0x7f0000000300)=""/116, 0x74}, &(0x7f00000003c0)=0x40) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="22843c74c30a38512f13565701e98586d6ff7ad800fa2e587064b8e8ca7d1de0024d28a493bfdf2de9b6425f09419e0b4a30437c27b1045c5233610dc3e13c212a247e6e322436685fd535c8886d973c8d73d60b23e6232dbca7354e258dae82d93909e5bf6ad0bed96738838faeec2b7765bf1688424de59bd760ca2bfaf65ca609ce25852c4e80f4611c13fe03273bb879cc4538dc966e", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,access=any,\x00']) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 14:28:17 executing program 7: syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xed, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 14:28:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={0x0, 0x1, 0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x30}}, 0x0) 14:28:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:28:17 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:28:17 executing program 4: shmget(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f00000001c0)) dup2(0xffffffffffffffff, r1) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) dup2(r2, r3) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200005e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c4600000708000000000000000002000000000000003f010000000000004000000000000000840000000000000001000000e9fa380000000000000007000300000081000000010000000000000000000000c97b0266f7e92a46000000000100000000000000730700000000000003000000007a000004000070fcffffff0000000003000000ff010000000000007f00000000000000d000000000000000008c3202000000000300000000000000703c77eda5c250867585029722d0489b71b18a0300000000000000e435864642330f8542ea50a0be9aa3226beb4d4d3d68747e482c6f57586c8fa3c1c2728056ea8ef95af00e5ff1557ce68b893071dbb1d1b17993eb7be9c7b6365c723b00000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000863d73880000000000000000000000000000000000000000000000000000000000000000001700edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009568b31f42842c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000004000000000000000000000000000000000000000000000000000000000000000000a3f90005000000000000000000b70000000000000000000000000000000000000000000000e6ffffff0000c500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005fae77fe2cd5d4a600000000000000000000000000000000000000000000000000000000000000000000005958d1e687a5661cbfd7cf73de808acc90a35dd860628c56024d5aef1159bda666b5c0ddf5cd766e01ae6cc48b075c25ef0d4fcad340fe98a129acef862abe017615851278ecf7a603141cdd46d18da215d661ed7dd977edb318322a9228ce2e55e14ce2796b2cb2eca14feda1399beea554aa6e498b1235d9bed87229173d38a00cc370b5e9fa02b147881f3d9742c0b88c87f74ff767c0d22b0bcaaee5d224e0b3aee284f55a9692f3d9856058d4af3160d02cb28b2689bb5a890f51d66eaf29688285127b4b027fd49147162622e506d0e52e9764a8bef2c96d4188f5f19cf00d6dc6583827ab7ac214122758dea12eaca82a667ce4"], 0x51b) 14:28:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x1000000, 0x4) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x185500, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) dup2(r3, r1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) accept4$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x80800) [ 450.526340] 9pnet: p9_fd_create_unix (4951): problem connecting socket: ./file0/../file0: -111 14:28:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100001010000000000000000ff010000000000000000000000000001ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400736861332d35313200000000000000000000000000000000000000000000000000000000000000000000000000e940489e751e1143000000000000000000000000000000000000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000dfffffbccd9fc7ddb429c5f3883fdc2aae00"/337], 0x184}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) [ 450.698740] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 14:28:17 executing program 0: inotify_init1(0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 14:28:17 executing program 4: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000180)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x450745c438580058) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x2, 0x0, 0x100}) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0xe11, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$CDROMSUBCHNL(r2, 0x530b, &(0x7f00000000c0)={0x3, 0xe4, 0x5, 0x8, 0x1, 0xff, @lba=0x100, @lba=0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001d00210c0000000000000000040002000c00348008000a0002000000"], 0x20}}, 0x0) 14:28:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 450.986972] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 450.994673] 9pnet: p9_fd_create_unix (4977): problem connecting socket: ./file0/../file0: -111 14:28:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4, 0x0, @dev, 0x3}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000753000/0x1000)=nil, 0x1000, 0x2000008, 0x1010, r2, 0x2e7ac000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r2, 0x0) r3 = io_uring_setup(0x5204, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x6, 0xc, 0x0, {0x0, r4, r2}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0, {0x0, r4}}, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x8, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10) r5 = getpgrp(0x0) fcntl$lock(r1, 0x0, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x8, r5}) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) 14:28:17 executing program 1: epoll_create(0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000a77cc02a3b3ca1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000df00"/256]) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) close(r1) statx(r0, &(0x7f0000000600)='./file0\x00', 0x100, 0x400, &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/233, 0xe9, 0x1, &(0x7f0000000300)=""/116, 0x74}, &(0x7f00000003c0)=0x40) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="22843c74c30a38512f13565701e98586d6ff7ad800fa2e587064b8e8ca7d1de0024d28a493bfdf2de9b6425f09419e0b4a30437c27b1045c5233610dc3e13c212a247e6e322436685fd535c8886d973c8d73d60b23e6232dbca7354e258dae82d93909e5bf6ad0bed96738838faeec2b7765bf1688424de59bd760ca2bfaf65ca609ce25852c4e80f4611c13fe03273bb879cc4538dc966e", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,access=any,\x00']) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 14:28:17 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:28:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 451.140559] 9pnet: p9_fd_create_unix (4988): problem connecting socket: ./file0/../file0: -111 [ 451.334679] 9pnet: p9_fd_create_unix (4992): problem connecting socket: ./file0/../file0: -111 14:28:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:28:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000400), 0x24, 0x0) setregid(0x0, 0xee01) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getegid() setxattr$incfs_metadata(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0)="ecd025ba3f99db73d2bc9e47aa2f11cbdf6145da04e19adc8779d018281dca64044976d3cc2360bb5ed0c36a202a4633119190d00a70b279a8a4bc18dcc9b2896bd8a006e395a3a4d0185d1379a24b3a3e14f7e4b704a7ba2f2b12a1c5ffd14c0a1276d217ddabd3fe1bd145f1b651d41efca75669ce98f6d8ef05100b90c6d5fe963204b65d7b4e292e7fc4840bd4c9", 0x90, 0x3) getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 14:28:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:28:18 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x20) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000300)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000000)={0x5, 0x5, 0x68, &(0x7f0000000080)=""/104}) 14:28:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001340)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x3c}}, 0x0) 14:28:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x200}, 0x14}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) 14:28:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:28:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) flock(r1, 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x0) copy_file_range(r3, &(0x7f0000000240)=0xfff, r3, &(0x7f0000000280)=0x1000, 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:wireless_device_t:s0\x00', 0x27, 0x3) pread64(r4, &(0x7f0000000140)=""/142, 0x8e, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) readv(r5, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x6) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000380)={0x200, 0x4}) [ 451.435520] 9pnet: p9_fd_create_unix (5005): problem connecting socket: ./file0/../file0: -111 14:28:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 451.602715] 9pnet: p9_fd_create_unix (5016): problem connecting socket: ./file0/../file0: -111 [ 464.425260] kmemleak: 1399 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:28:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:28:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000d80), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6008000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x14) 14:28:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) recvmmsg$unix(r0, &(0x7f0000007480)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000540)=""/10, 0xa}, {&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/10, 0xa}, {&(0x7f0000001680)=""/171, 0xab}, {&(0x7f0000001740)=""/95, 0x5f}, {&(0x7f00000017c0)=""/28, 0x1c}], 0xa, &(0x7f0000007680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000004f77000000000000000000d1f16c7f2e71cc", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/211, 0xd3}], 0x1}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/185, 0xb9}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/126, 0x7e}, {&(0x7f0000002cc0)=""/26, 0x1a}, {&(0x7f0000002d00)=""/235, 0xeb}, {&(0x7f0000002e00)=""/43, 0x2b}], 0x7}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/250, 0xfa}, {&(0x7f0000003fc0)=""/173, 0xad}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/42, 0x2a}, {&(0x7f00000060c0)=""/104, 0x68}, {&(0x7f0000006140)=""/210, 0xd2}], 0x8, &(0x7f00000062c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000006380)=@abs, 0x6e, &(0x7f00000064c0)=[{&(0x7f0000006400)=""/146, 0x92}], 0x1, &(0x7f0000006500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000006580), 0x6e, &(0x7f0000006d80)=[{&(0x7f0000006600)=""/136, 0x88}, {&(0x7f00000066c0)=""/192, 0xc0}, {&(0x7f0000006780)=""/61, 0x3d}, {&(0x7f00000067c0)=""/199, 0xc7}, {&(0x7f00000068c0)=""/144, 0x90}, {&(0x7f0000006980)=""/128, 0x80}, {&(0x7f0000006a00)=""/197, 0xc5}, {&(0x7f0000006b00)=""/135, 0x87}, {&(0x7f0000006bc0)=""/246, 0xf6}, {&(0x7f0000006cc0)=""/170, 0xaa}], 0xa}}, {{&(0x7f0000006e40)=@abs, 0x6e, &(0x7f0000007400)=[{&(0x7f0000006ec0)=""/9, 0x9}, {&(0x7f0000006f00)=""/147, 0x93}, {&(0x7f0000006fc0)=""/135, 0x87}, {&(0x7f0000007080)=""/178, 0xb2}, {&(0x7f0000007140)=""/34, 0x22}, {&(0x7f0000007180)=""/222, 0xde}, {&(0x7f0000007280)=""/106, 0x6a}, {&(0x7f0000007300)=""/244, 0xf4}], 0x8}}], 0x7, 0x2, &(0x7f0000007640)={0x0, 0x989680}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x3f, 0x40, 0x80, 0x0, 0x3, 0x28020, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x5}, 0x10000, 0xffffffff, 0x2, 0x1, 0xfb95, 0x7, 0x6, 0x0, 0x8, 0x0, 0x3ff}, 0x0, 0x8, r1, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r0, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x123102, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000080)="0a3c2d332978f2cf44aca9e7c4f56086", 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) dup2(r0, r3) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 14:28:37 executing program 0: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00b3ff29edf071da5bc701277f1ca5c56f9d2c24d50691553272cddcea5483db81b65a3c7cd8e56edc261f93ba53ae71f68b2141adf5da00402a9bcef4d80ee38b35e95cd8916d57c4ee8fbee8643fdb0b7146cac56feb69", @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000811) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000240)=0x8) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='/.+!,\x00', 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/197) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x200080, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 14:28:37 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x140, 0x83}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) fadvise64(r0, 0xf0c9, 0xffffffffffffffff, 0x60214941b59ec1fd) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r3, 0x1, r0, r0) 14:28:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:28:37 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:28:37 executing program 7: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x200005, &(0x7f0000000280)={'trans=unix,', {[{@cache_none}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, '^.'}}, {@fscache}], [{@euid_gt={'euid>', r0}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@hash}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@obj_user}, {@permit_directio}]}}) [ 471.268988] FAT-fs (loop7): bogus number of reserved sectors [ 471.269602] FAT-fs (loop7): Can't find a valid FAT filesystem [ 471.293597] FAT-fs (loop7): bogus number of reserved sectors [ 471.294219] FAT-fs (loop7): Can't find a valid FAT filesystem [ 471.300730] 9pnet: p9_fd_create_unix (5046): problem connecting socket: ./file0/../file0: -111 14:28:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001180)=""/4091, 0xffb) dup(r0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r2, r1, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x7) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ptype\x00') dup3(r4, r3, 0x0) 14:28:38 executing program 7: r0 = getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x3d) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a02}, {&(0x7f0000000280)="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", 0xdcf, 0x393}], 0x120040, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r3 = syz_open_dev$vcsu(&(0x7f0000001280), 0x5, 0x20000) symlinkat(&(0x7f0000000180)='./file0\x00', r3, &(0x7f00000012c0)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40, 0xc9) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{0xffffffff}, {0xffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe}]}) r5 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r5, 0x0, 0x200) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0xf59c1c06c07ce2ad, 0xfff, 0x0, 0x1, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r6, r5) fcntl$setown(r6, 0x8, r0) 14:28:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 471.494696] tmpfs: Unknown parameter './file0' [ 471.659800] 9pnet: p9_fd_create_unix (5066): problem connecting socket: ./file0/../file0: -111 [ 479.912065] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 486.351823] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:29:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', 0x0, &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:29:00 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x10, 0xffffffffffffffff, 0x10000000) 14:29:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:29:00 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:29:00 executing program 1: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00b3ff29edf071da5bc701277f1ca5c56f9d2c24d50691553272cddcea5483db81b65a3c7cd8e56edc261f93ba53ae71f68b2141adf5da00402a9bcef4d80ee38b35e95cd8916d57c4ee8fbee8643fdb0b7146cac56feb69", @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000811) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000240)=0x8) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='/.+!,\x00', 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/197) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x200080, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 14:29:00 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x410101, 0x0) 14:29:00 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:29:00 executing program 0: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00b3ff29edf071da5bc701277f1ca5c56f9d2c24d50691553272cddcea5483db81b65a3c7cd8e56edc261f93ba53ae71f68b2141adf5da00402a9bcef4d80ee38b35e95cd8916d57c4ee8fbee8643fdb0b7146cac56feb69", @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000811) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000240)=0x8) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='/.+!,\x00', 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/197) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x200080, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 14:29:00 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400a00, 0x5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c001200200000000000000000000000000000007b82ec5b0000"], 0x1c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfe, 0x4, 0x7, 0x9, 0x0, 0x0, 0x2000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x10008, 0x8, 0x0, 0x7, 0xffffffff, 0x2, 0x803e, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x4, r1, 0x8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2321202e2f66696c6530206d6f756e74699effffff202b28206d6f756e74696e666f0020206d6f756e74696e666f000a2668a85b3daf670f7ae97894cf5931db539e4245159c9614658f1029bc25ddb2e5e50f5008b2ddcc27e95a61cd093d6fd3fdebfc3718f86d3eb80667e9d0d324fff89f391d46be452659fbea273a35fc3d48652296f89911adba6a7a8973d8a01b069714b8491662e6250fc82eb19e248bc07f8f2bb77ed3b63e2b653fe72e191bc6008124cf954da9684a69f950a79bbd3ebc5b322e682222243618c658a274613352722f02dd4da8572388159f8a20d48e1abc36789926003b73b666673f3e57dd03dae44de1d4a77cc8cfa670d4478ca43caa7b8e789991832e0a73523124c2109529da08ad4d8461aec10732f387adf2864498d4fb89099e48be084fce37448aa2c50bf8c8f293f143dc7b09fe49e07899011e56e70d93b9ac91da51f756dc6dcc02f01e4bf960f4aa411acb3fad562dfdb7bc3cdc9c9b8a49614013b87b026d81463921a34a2fe6743bfe40e52664ffbb2601c24893b5228a80c93cf7ce947183921c6faa9658f793fd786ed4dfd537fb420b88ca4c960c73be7f9869e022918090ad2be41d71d8612c04dc98d8dc01c4f6d226fe3ad9c2ddebdb952fe8229c4a1358b8663c4e18368dd98f13be4839b3612e95ef5b75c15e931772187729e960d28cd14ba965d46873a099b2dfee85d73a984a22a50848bf2bbaabc678457ef3b313fcc35d9c29e298d49af9d0b502a5997f13201516fb7e5f6a5da626ae86c99affc6b06b6ee7711f0072878c35678fa4e27bff13955db508d37701394b8357dc412af66175642bc94ca78ff7cb89ec13a653b2f8e6bf4ef8662666caa44ad190a912f4c9188ceec2ceedb4d75995472c0c7da3d12f2c595e1f19f6e1ed93842849272af0eff2d1f2904325706364cab46d700eeddc6e942912ddfde408ae5c268cf16ed99d9fbe518ba781c441f09abd008028cf1aa9f05a9a42949e3fc5d2981bd21e9e74f6099c3001ef2bd349d6800f9501cb5fe511cf9f864a7d39d2ad8b02499b87702d0a75f5fd97283f579afef61792ca38908be74656d8de452d6d0654b31023262d175478641310e23ece9b4ed13b80b9ce584bbaf7be2fe87c5b470de047738746fd5bad13b4caafc32553bad354cb28a55f0b4501aefa439ccecee3395903ee79aa97dc7bf4ca09f1f42b23cdce330cf0f3a363de2abe023fdb1d3868634722c0c7fb46eb87158cac7dc41857057a0eb061e94bd88cfd9562e51563500745973b242250b30a39bd699d82722aa0c3f20d49b8ff24fdd2013eb6c20a49dddbefcc8cdf2372d1a82622799cd3e31f6b915adb9bee2631cb268204523902eeaa1653cb94a48c68f99dfaebd35a6366d4c1ff77d2d928cf839c56dcf3f0ba2c59c2f3e3893e73653cb481acb914cc963193e3ec890d5fddbab9c0e8472adb3504a39abd8fc3de2eb4df0a24402c53eeeae60418f2eaa84d36ac2c522653b40d8a99ef5c31dacdb607699cdd89dcfd3bbd34e6da15cdc58addb30f96b125067cb99f911800a4f8e09c801ad6661905df614bada56542a2f33949fca50828e62b6b5dee89c83d5caee0c1a7d85b31597d7a43a0203258ed12359b55467c8ac8c3736180cf625bd364c1642507c89163639ca34d43f89a52ed55bd1445deac698b15271ed6955f8f1cc85cee515c15bc42c49a3dc5f2058a3c76f2f7b223aec7ad37f87f1caa89a2fd8b616daf10cfdcd41ed66fb2ebad9b6d568d212335fb845455c792f10815ff9833e7670b4963ffa708c7561df5663b586dea11a738aa82a634d1523578318f241faa537de8c853aa4fad93f557d1587c6e79b2a23f124bf162e1efa049f4d9d3208083ac61bc55806d70aabffcb7254befd91627e0d37885aceb3f5bd01265edca354d0e8dc9b7d1b54a2a785f567dd626caee202b1a2929058f63011ec956b3d6781798f4d96467e43ab53a43c0fc8c975c1ceee63b78cd05c141fccd450cb7c1f9c0a80150df93eb19c18b15630acea85d32f4eb01ea6751164ee420748f1df647b14068ac7b9c97061bc13a738a4d1e08380c8ac47904658562390cde8c9fc9226fbcca7bb341bbe759696882159f93ee46831360d6226b59fb92029eb7d42abf2aa3955f9b474762104bf12d13d199719d29159340da97d55336406738e37f9064ad7a1cc9ee388eaded239f625a4aa2aea6b6ebb6fdc0a378279ae43a511a696585fca3791fb26158c27a71c45c70775c769c1ce8ae43605333fd701d61ff7186cf3cad69aa1890d8c96930f020a78a1e953868ffbc744f07ba3c3d8531b630ee2e4d7e08130f0aa856ecc6168d5f02ca3eeca9e6ee00d497e615107604f5333aa5cbe3773602eb9b56ca93d0ea6ad18f72ce08cc99337c31c1300e44a64fc334990df1e14cb2ffbbb326c368c8660e00000000000000868fe3ff96226b0ec5e0933de442f34705a69591f9f0c23a1e69ec46933e27a23bb7bbc53be7d704b8f50e1476c473c6b89df32d558c0d923f040850ffebb16f6539a5ab8149db2e87c3fa3ed2d60575d59a463bcba4aed67643885b41c900e6b7aa5776c69deebbb851be7693c0d4d4305563d4355190de3b8c9a8081f8cee6455361d87909f744d783a6d99cc4f1769a7d489a39c98b4c1018be7abe539d7b6bc550faf9540fcafb08075d8b134f6907445f8b94baf3ab68d22e4198706af5ffabf14ac59a370de2af2cfb4129535faa93939e3a5b66de0c5b1a794368232141476b692f809a20b8df1d3c85da81e35ef59118ade46a713de35fb3371ae6db1600d97d7d763e417e8be192ccb6bc20afc0d2a3fc22b9c72bb4c6ceb6b148b4890273db9eb1b2bcfbc76b3c2627294063c7cd1fcf0a8f3437ade010fede1689149dbe67bc728354437f6db5cb9b83b78a27731936cf67e366934ebfb8d73b8bd80ea625c86b6dd046320e030e8384e8402113d98c6630dc023b641f4cb62c2ecfc258028b097c5008df22fa1cc83f31f791458eeb4aa368e201993a19765bc6cad0beb0d31c481bb0bd92da43ad8b2c2858e9ef5c539fb279a1bff31488d3f3e22fde43c6e5d45d10edcfd2bab722cc4ec125620e220baf6a584c48e3f06cb4b2de9103bb9b5bd764dc97c7e3ee81b4f90ab09b5a4f28253f4d17853b414ed1eb1831ce9ddf9b9a606b31debb4b2af1846ceda0940bd6400bbc788b79bbb790b795d6e31a0118ed01d180aa46ecb33450dfcc07ab891c834b6e957409bf5aa67225f7db6476595269d0bad1f14b911545c8c481cf84d87642fde8bc8cb2950a476d27093ca1de2dc4fad13201ab1e41316d9fa0168ba68c3a3279a1413625c0a0fce64fc1636ae9d1114fdbe3c07ce5ccc2efae8e989cbc54113021e5cd38a56a9d3cc6d8c6792b2cdc3f6b111feb3061110c895481f3bf5f3819d4a4449343d780cfaf8d4a0f5703381852b3e95d04484503139556c410e9ab6e50ca889e6820af999e6c0667e2321131e80cd5660631fb79cacc46e76cef2356561b806aec794904a9f06a1a232d46aba2988bab56154ba4c589918a036d8eadc94e2640299c75b7b23acc18b8ef38b7b9b5cd1b61244b34103f80e024481c4ac413690ef47bbb49fc8746aad56269ab1b4e8ba2b89b033da5c0cee79636c983f1ecd827a7161e4541f80dc65602248fb57349d245cb1a11242cf66909e28bc888e44a60a743a5483e52c847a153a56e9fc86b7689886e1bb6595098a196b2224eb9f94990828a2aab2012eddf3cc2c6fcbd6885c2ccdeb673953faadfbe7a9bf8424caac33e0836d4f5c25239f16d3b2857282dd465ea5a5c15bd26129267576509df172cc7a1488e1d12a6cdf00ba58b190aba95f9653e84e90f6e49e3cb4b4b5e689b30d7f0ab4ce71562982a82fe9a03a6ad9245623961fd8f1c94c5ec39bf2b6c7e8d85f38e6aab5eee9af13c60678171f38eebc1d8c6d4457b83113b809ba92181cd40b64eefab9b584501e0e32db2941d07ff2c57a34cb06be9227aeee65d9d5c8dd1cdd2db845c69470267a73f3d16c9ab1403bfda4cce4ed2137aaf09712ad98adaa1fe2b2544e36bda62350e74977eb0870facf3c76e4c9310e819775e2312e9ae7f4a7f2cb3a302715084149a4a0f8f59460bfa30f9882fdc257f53ae5372cd30f4e8f214736d6fd990ac9da3618edc31dea84c609b4e8c6b6b0f7d5e7de9ced04c391bbf80a7f823e2433b2586c4e3efb74fd727b9cefbdf202d8a5851af2432362b164b623a9b2623375c6b4a98fd41e37900cedad4c1d04457a2df97ea84131511c6ab0de61fccdd3feda88970c6d3890724c1706ed845608c2bf020d9133e855f44cc3c28ad9442238d711028b3c9ba801b36930748685836feae1c81975103d6470d66d3982fce1d877208f471d875925b6d0e5fd7d6af31f5657d406620ccb5faa665873d0acb3464d68c8cfed50eb13dac06692c8724264978828cf96cd10c34397143aefcbb03680301dcaeecec250a4e144adacbf54270ecc1f225ad9f880407f6508b536cdaf29c81983de7411814e97e7c4ffaa21891e80409d181791dfb15a73ca232da0bd8e9d507713cec02936c58223dab4631fd356f16476d19636fe915990bbea61ceaf3de147c02e9a9c056f642f915c21c79a9150ed70578b86fc32014c62f0c6cafcb0d6b4f6e6d712784d21f7987244248ccc0b537681b182437683d5fe4eaeba635aab5d3787c0a49543b850c79df8e82f50d40ffa374076830992b32ca67f239a55bafc7f98b64d3d629fb9885698d49f3f0967a6567df3eb95ba951133717b366590b2c27f8928a4021e898798b66dd86585acdb424fe5cd8044b6a0c6a52d9de968a8b26c47458e4a45a6629eba260055f8fad7bbfc7a966b85b4c4272347f86b66c06296d79d5d355c8630603764c1d760b73dfe56d3e58cce957b230b18d2866b591e12d6de569613a4d8a4c526afbfcbfb6f1866c2f46105a948e2f5acb4744fe708d79139369724576303df9cb3e66ab4570eadcbe34c3651b8ac260bfdb38f23fb6aec5180a12ad7f313e8acb2cb4db3c9ba88831a82bcb435bcb5f67ce91a3a4eeb7f33fde05631c7f117544f8e5cfe809a49355ab8fd6ac30b03cf9cc8e0a82e21d75d543055bfb762209d2d190dfc2dc0b5110e0bc49c776c45636d264b769036c8ca0ae2834efb1a06208d33f6c49b1873d5fc668cf7ddb9d19d8edae0c2387354035f0e04cb3c2436901f55f2ddb8ffc0b82bfb73d8a3446721469fad068220d1a34b8c68f31fc73679afdc71d8dd2df671f3a5b93d32f3a684dd9aa75e18290231944c2f9707cd8792a10b5602162ed62a656ad0f37088eb5556bd8aaaca21691ba4390ea2589d19f478d3a6aac0f157e1b8ab9fd98e30a30964cd6a4938789ffc53cb0135fbea25348c4e50973b8d3a9dac047b4e05a3c1674a0342617289e3bf589ca6876898dc894d7e5d811be5127dc55771022c29cfc68220c61d2d1b265e94ced89ec6f4c2ae60fda660ffb9b8c39f657cb8a08e2d1d4df3cdf4e2f4e33d6e30035d1ecb80d23f7879b1f851b91c308eb8718d99d4698b38812e5c6bbd0919b4c75485d69200ee52eaeb0988f9e71ce1b13171bb57c0f5ca5272766f4cfe2acba50c3f3c2906605ff7436d0024cd4906118a2681426cef309f344866569a74123f40d5e9617eea533772a0580edfc1e8f2c06dbceb157c09a4186e6d745464bb1133922abefbbb4fb85256b6ac0f8729edd2c98be5126fefa40931988ea5171531d039c59574e0d58498379f4c758922508c58f70307caf7976eba125b9133bfb943e2dada611705f683acece51d2bdad7099adb10913aed00c051e01191dbec0b3964ba4d7fcc892adfe89ba797bf6b87fdb01"], 0x1030) tee(r1, r5, 0x7fbc, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000380)=0x690a, 0x4) [ 494.172158] 9pnet: p9_fd_create_unix (5092): problem connecting socket: ./file0/../file0: -111 14:29:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', 0x0, &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:29:01 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000009c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000001c00)='./file1/../file0\x00', &(0x7f0000001c40)=""/99, 0x63) [ 494.346215] 9pnet: p9_fd_create_unix (5103): problem connecting socket: ./file0/../file0: -111 [ 494.396541] tmpfs: Unknown parameter './file0' 14:29:01 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = dup(0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:29:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) dup2(r2, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0xd8a81) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a888e8ce085101e18000000", @ANYRES32=r6, @ANYBLOB="01800000000000002e2f66696c653000"]) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="000000000000000000000800000046dff21750dbf97191b418faa0763620356b825d07d37420b2f7c2f7b2800b01976478a5a3c42f9a"], 0x14}}, 0x0) keyctl$setperm(0x5, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5ead}, {0xa, 0x4e24, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1, [0x1, 0x100, 0x0, 0x20, 0xfffffffb, 0x6, 0x6, 0xfffffffc]}, 0x5c) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x5392, &(0x7f0000000040)) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x3) 14:29:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', 0x0, &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 494.564373] 9pnet: p9_fd_create_unix (5116): problem connecting socket: ./file0/../file0: -111 14:29:01 executing program 1: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00b3ff29edf071da5bc701277f1ca5c56f9d2c24d50691553272cddcea5483db81b65a3c7cd8e56edc261f93ba53ae71f68b2141adf5da00402a9bcef4d80ee38b35e95cd8916d57c4ee8fbee8643fdb0b7146cac56feb69", @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000811) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000240)=0x8) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='/.+!,\x00', 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/197) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x200080, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 14:29:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:29:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 494.756527] 9pnet: p9_fd_create_unix (5124): problem connecting socket: ./file0/../file0: -111 14:29:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 494.953411] 9pnet: p9_fd_create_unix (5133): problem connecting socket: ./file0/../file0: -111 [ 507.332808] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:29:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:29:21 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:29:21 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000180)=[{0x0, 0x0, 0x1000}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 14:29:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1ff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)={[{@nomblk_io_submit}]}) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbff, {0x1, 0x0, 0x1, 0x0, 0x40, 0x0, 0x8, 0x8, 0x0, 0x1000}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc844) 14:29:21 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = dup(0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:29:21 executing program 1: sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00b3ff29edf071da5bc701277f1ca5c56f9d2c24d50691553272cddcea5483db81b65a3c7cd8e56edc261f93ba53ae71f68b2141adf5da00402a9bcef4d80ee38b35e95cd8916d57c4ee8fbee8643fdb0b7146cac56feb69", @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000811) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000240)=0x8) symlinkat(&(0x7f0000000000)='./file0/file1\x00', r0, &(0x7f0000000680)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='/.+!,\x00', 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/197) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000004c0)=0x2, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$full(0xffffffffffffff9c, 0x0, 0x200080, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 14:29:21 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBMODE(r1, 0x4b49, &(0x7f0000000040)) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x8, 0x6, 0xff, 0x0, 0x2, 0x180, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000100)}, 0x290, 0x6, 0x7fffffff, 0x5, 0x8000, 0x7fffffff, 0x1, 0x0, 0x7fff, 0x0, 0x2}, r2, 0xf, r0, 0x9) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d3970323030302c6163636573733d616e6d1ece"]) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r4, 0x5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x40000004}) r5 = syz_open_pts(0xffffffffffffffff, 0x200080) ioctl$KDSKBLED(r5, 0x4b65, 0x81) 14:29:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 514.936217] 9pnet: p9_fd_create_unix (5155): problem connecting socket: ./file0/../file0: -111 [ 514.953601] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 515.005725] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue 14:29:21 executing program 4: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, r3+60000000}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x40010, r0, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x50, r0, 0x0) 14:29:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x0) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:29:21 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xa9c9, 0x0, 0xfffffffd, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x1, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="626f74408603aacef9e4ee28f10ccdb680413f902e9da8758d2334638496095d9f7bfb8f1da9d2e491b7ef9da47fe68fbf669108b9029c2fcc844a81448c78536a0355a69dd9806e694cb9f5d0990374fc3d27d6a06188b05d8fd39d05a1953adce36d43fb6a0d0cb1f4743666629464c85b1d0aee129368f59d09b4e63bf58826a5d5a758e6be5a779efcc4bdcc4d0c5ee7e131f1b731f3d85ed0fa627597a122b31490816b0c0e2400306e9849eaae32a99e575707eb2a6f7a34fcd1018a00deff612b7bddcb9149ceb44b358743e8a8480f00578c8b7bacbc8230f33d0247a9bca4c7406cd856539de837bd579e1c", 0xf0, 0x80000000}, {&(0x7f0000000300)="c0289b7ee03850dadf84bacfa2bc294fdd8dd77f4f5053ac97e7461114c4c29d1337771b22af6b0810d649470e93e24ea35fb05b4407e3392f242e6c", 0x3c, 0x7}, {&(0x7f0000000340)="f2a31707f1525d3985d9954253589815127d15120794812dcf26cd77799d949a5254344dc62cc788585d6d36660b8a8344ede7c8d5fc96d1aa2a751b36a69df0504bedeb25d254c668147d5730ac11baab8006f8561dd300c1652ac6af1358d1c4e7b4427b8d6b549a62f22eaba3b0793bdf902fafe756df6ac26b32f08ad20c92730e7e", 0x84, 0x8}, {&(0x7f0000000400)="8b72fab8bfa73cceb0c7838998375217c6cda2eea4c6ff7bbb3bdf8363c37a8ad7cfa268dec2bda6b3acc88e2d9256e7d4111c43ccccd54e6525997819e76ea3a1023fbfc91384", 0x47, 0x6}, {&(0x7f0000000480)="d24ef3e1dc2b89ba16e87aa7677e6cf7f02df36e63cf47ec344d48ae783b235078b9db5a8342f2607a03ccd0a64ef3c82219cd63422bc6b33a80b3606affb453d10a64ee98945561076d77817cd507307af4c75c67c586a61f0bb48f05bdf62600d3fb5a9a6e0e194e4b8744d08bb37b7c0f06d32643426f37daac52b7da0dc904434adb7b2e554724d470fcacc371d941d494126909296ac85bb17fa2640cb5231250be7f41b51bd01a6d121d2a524a77cf1d2664c0396f26d8d7da2d85", 0xbe, 0x2}], 0x62000, &(0x7f0000000640)={[{'*\'@{+--'}, {'.'}], [{@subj_type={'subj_type', 0x3d, '/]'}}, {@smackfshat={'smackfshat', 0x3d, '&$'}}, {@uid_lt={'uid<', r2}}, {@uid_lt={'uid<', r3}}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_role}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f0000000140)='./file1\x00', 0xc) 14:29:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/246, 0xf6}], 0x4, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000600), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/65, 0x41}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f00000017c0)=""/233, 0xe9}, {&(0x7f0000000340)}], 0x7, &(0x7f0000001940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/20, 0x14}, {&(0x7f0000001b80)=""/122, 0x7a}, {&(0x7f0000001c00)=""/172, 0xac}, {&(0x7f0000001cc0)=""/168, 0xa8}], 0x5, &(0x7f0000001e80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x40000040, &(0x7f0000002000)={0x0, 0x3938700}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002040)={'\x00', 0x7, 0x6, 0xfffffffc, 0x435, 0x2, r0}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x81) [ 515.223627] process 'syz-executor.4' launched '/dev/fd/-1/./cgroup/cgroup.procs/file0' with NULL argv: empty string added [ 515.240710] 9pnet: p9_fd_create_unix (5180): problem connecting socket: ./file0/../file0: -111 14:29:22 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000340)='./file1\x00', 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105142, 0x80) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2}) creat(&(0x7f00000006c0)='./file0\x00', 0x3a) syz_io_uring_setup(0x4406, &(0x7f0000000180)={0x0, 0x7e3, 0x0, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, &(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x40, 0x2000, 0x1}, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="f472616e733d50642c1c114e4c6e3d", @ANYRESHEX=r4, @ANYBLOB="cd08a2af58b100fec1ce6ab7861597dd7b35e3a917ac4aff7fcf90ff273f61383854e77ee2e72b037d2c5b6ff2d3de5054abe934882a72e83eda9e490fb468f9a8103cef54267733b58cb0446d6c1cd3e8563f6c42ed3ed4e5698204de02d2ebf8ce46b50c7c900af9fc0d47b12c82343fddc78a7e92480630b74c64087e5a5d59a0", @ANYRESHEX=r5, @ANYBLOB=',version=9p2000,access=any,\x00']) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/169, 0xa9}, {&(0x7f0000000380)=""/24, 0x18}, {&(0x7f0000000500)=""/100, 0x64}], 0x3) open_tree(r0, &(0x7f0000000700)='./file2\x00', 0x0) openat(r4, &(0x7f0000000580)='./file1\x00', 0x10000, 0x8) 14:29:22 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x0) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:29:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:29:22 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = dup3(r0, r0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000200), &(0x7f0000000280)=0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0x9, 0x0, 0x0, 0x0, 0x2, 0x886, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x8, 0x7, 0xfc, 0x3, 0x7, 0x4, 0x1100, 0x0, 0x7, 0x0, 0x40}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x16) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) [ 515.372408] tmpfs: Unknown parameter './file0' [ 515.436154] 9pnet: p9_fd_create_unix (5198): problem connecting socket: ./file0/../file0: -111 14:29:22 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xa9c9, 0x0, 0xfffffffd, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x1, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="626f74408603aacef9e4ee28f10ccdb680413f902e9da8758d2334638496095d9f7bfb8f1da9d2e491b7ef9da47fe68fbf669108b9029c2fcc844a81448c78536a0355a69dd9806e694cb9f5d0990374fc3d27d6a06188b05d8fd39d05a1953adce36d43fb6a0d0cb1f4743666629464c85b1d0aee129368f59d09b4e63bf58826a5d5a758e6be5a779efcc4bdcc4d0c5ee7e131f1b731f3d85ed0fa627597a122b31490816b0c0e2400306e9849eaae32a99e575707eb2a6f7a34fcd1018a00deff612b7bddcb9149ceb44b358743e8a8480f00578c8b7bacbc8230f33d0247a9bca4c7406cd856539de837bd579e1c", 0xf0, 0x80000000}, {&(0x7f0000000300)="c0289b7ee03850dadf84bacfa2bc294fdd8dd77f4f5053ac97e7461114c4c29d1337771b22af6b0810d649470e93e24ea35fb05b4407e3392f242e6c", 0x3c, 0x7}, {&(0x7f0000000340)="f2a31707f1525d3985d9954253589815127d15120794812dcf26cd77799d949a5254344dc62cc788585d6d36660b8a8344ede7c8d5fc96d1aa2a751b36a69df0504bedeb25d254c668147d5730ac11baab8006f8561dd300c1652ac6af1358d1c4e7b4427b8d6b549a62f22eaba3b0793bdf902fafe756df6ac26b32f08ad20c92730e7e", 0x84, 0x8}, {&(0x7f0000000400)="8b72fab8bfa73cceb0c7838998375217c6cda2eea4c6ff7bbb3bdf8363c37a8ad7cfa268dec2bda6b3acc88e2d9256e7d4111c43ccccd54e6525997819e76ea3a1023fbfc91384", 0x47, 0x6}, {&(0x7f0000000480)="d24ef3e1dc2b89ba16e87aa7677e6cf7f02df36e63cf47ec344d48ae783b235078b9db5a8342f2607a03ccd0a64ef3c82219cd63422bc6b33a80b3606affb453d10a64ee98945561076d77817cd507307af4c75c67c586a61f0bb48f05bdf62600d3fb5a9a6e0e194e4b8744d08bb37b7c0f06d32643426f37daac52b7da0dc904434adb7b2e554724d470fcacc371d941d494126909296ac85bb17fa2640cb5231250be7f41b51bd01a6d121d2a524a77cf1d2664c0396f26d8d7da2d85", 0xbe, 0x2}], 0x62000, &(0x7f0000000640)={[{'*\'@{+--'}, {'.'}], [{@subj_type={'subj_type', 0x3d, '/]'}}, {@smackfshat={'smackfshat', 0x3d, '&$'}}, {@uid_lt={'uid<', r2}}, {@uid_lt={'uid<', r3}}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_role}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f0000000140)='./file1\x00', 0xc) 14:29:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808", 0x83, 0x8800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8adfe8596686ba8b51dc7f109433f48aad64c3fbf02945994f99bbfccf46839d1d919c8e946cb63f229ec357fb71f65daa056ca12718b4f3ef3e1c2307c60b7595ef3997d4930cd5903421839c76ab3e5ee6fde315a5204f224ac3b1f7e361d4ca77e9becbb838e979860b7b5234e4fcba0bae77ffbc32b842b41732e6c638d3455c27d20229946c6ce648ab97056f0888aeb22b296de7f654cf3f327e7d838da58329500c2d600b7c7257c3b21c361daa501d618814560451b6e59a23efbdbea75213ec63da94707d5c4984a388f8796523"]) 14:29:22 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r4 = getuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setresuid(r5, r4, r2) setresuid(r2, r0, r2) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) ioprio_set$uid(0x3, r6, 0x4004) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x230, {0x80, 0x0, 0x3}, 0x10b, r0, r3, 0x4a6f, 0x9, 0xa9, 0x6, 0x9, 0x80, 0x9, 0xfffffffffffffffe, 0x0, 0x10000, 0x3f, 0x5, 0x8001, 0x9, 0xa79}}, 0xa0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = fork() ptrace$setopts(0x4206, r7, 0x0, 0x0) fcntl$setown(r1, 0x8, r7) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r1, &(0x7f0000000700)=""/4096, 0x20001700, 0x0, 0x0, 0x0) 14:29:22 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x0) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 515.881250] 9pnet: p9_fd_create_unix (5222): problem connecting socket: ./file0/../file0: -111 [ 528.595222] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:29:43 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7f, 0x5, 0x81, 0x7f, 0x0, 0x8, 0x4440, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0xffff, 0x1ff, 0x0, 0x8001, 0x7134, 0x8000, 0x0, 0x6, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0xa) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002c00010d160000000000e4ffffffffffffffffff5093f7408ce503a147171c2c28ee7884c7cd57b0e8205d204aa8065ba9eac4cdb65201b2eb62252be8d5be1480b7bba5871a24c3d790a1921f9bd03dd9af9e06787ae154523b8cb1d809e9d4caa35fd6e7c2d464ff51e2052b3c901bcb25f8925592a95c07bffe7870bf1a37cd6479cbf85907df085ba3b96ca5084e735c61d14604f2e654df0538c9eceb243287a149eb12cf7ec9a47d76bf854bc92b6b6501443ac9b80534aa4e49d0d677df71318a89a990f33ba76e692fbdd5"], 0x28}}, 0x0) 14:29:43 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = dup(0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 536.288406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:29:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:29:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x0) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:29:43 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:29:43 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xa9c9, 0x0, 0xfffffffd, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x1, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="626f74408603aacef9e4ee28f10ccdb680413f902e9da8758d2334638496095d9f7bfb8f1da9d2e491b7ef9da47fe68fbf669108b9029c2fcc844a81448c78536a0355a69dd9806e694cb9f5d0990374fc3d27d6a06188b05d8fd39d05a1953adce36d43fb6a0d0cb1f4743666629464c85b1d0aee129368f59d09b4e63bf58826a5d5a758e6be5a779efcc4bdcc4d0c5ee7e131f1b731f3d85ed0fa627597a122b31490816b0c0e2400306e9849eaae32a99e575707eb2a6f7a34fcd1018a00deff612b7bddcb9149ceb44b358743e8a8480f00578c8b7bacbc8230f33d0247a9bca4c7406cd856539de837bd579e1c", 0xf0, 0x80000000}, {&(0x7f0000000300)="c0289b7ee03850dadf84bacfa2bc294fdd8dd77f4f5053ac97e7461114c4c29d1337771b22af6b0810d649470e93e24ea35fb05b4407e3392f242e6c", 0x3c, 0x7}, {&(0x7f0000000340)="f2a31707f1525d3985d9954253589815127d15120794812dcf26cd77799d949a5254344dc62cc788585d6d36660b8a8344ede7c8d5fc96d1aa2a751b36a69df0504bedeb25d254c668147d5730ac11baab8006f8561dd300c1652ac6af1358d1c4e7b4427b8d6b549a62f22eaba3b0793bdf902fafe756df6ac26b32f08ad20c92730e7e", 0x84, 0x8}, {&(0x7f0000000400)="8b72fab8bfa73cceb0c7838998375217c6cda2eea4c6ff7bbb3bdf8363c37a8ad7cfa268dec2bda6b3acc88e2d9256e7d4111c43ccccd54e6525997819e76ea3a1023fbfc91384", 0x47, 0x6}, {&(0x7f0000000480)="d24ef3e1dc2b89ba16e87aa7677e6cf7f02df36e63cf47ec344d48ae783b235078b9db5a8342f2607a03ccd0a64ef3c82219cd63422bc6b33a80b3606affb453d10a64ee98945561076d77817cd507307af4c75c67c586a61f0bb48f05bdf62600d3fb5a9a6e0e194e4b8744d08bb37b7c0f06d32643426f37daac52b7da0dc904434adb7b2e554724d470fcacc371d941d494126909296ac85bb17fa2640cb5231250be7f41b51bd01a6d121d2a524a77cf1d2664c0396f26d8d7da2d85", 0xbe, 0x2}], 0x62000, &(0x7f0000000640)={[{'*\'@{+--'}, {'.'}], [{@subj_type={'subj_type', 0x3d, '/]'}}, {@smackfshat={'smackfshat', 0x3d, '&$'}}, {@uid_lt={'uid<', r2}}, {@uid_lt={'uid<', r3}}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_role}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f0000000140)='./file1\x00', 0xc) 14:29:43 executing program 7: syz_mount_image$nfs4(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fsc']) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x208c00, 0xb4, 0x9}, 0x18) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x80) 14:29:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) [ 536.324193] 9pnet: p9_fd_create_unix (5241): problem connecting socket: ./file0/../file0: -111 [ 536.331719] 9pnet: p9_fd_create_unix (5242): problem connecting socket: ./file0/../file0: -111 [ 536.347995] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:29:58 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:29:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(0xffffffffffffffff, r1, 0x0, 0x9bbb) 14:29:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) recvfrom$inet6(r1, &(0x7f0000000240)=""/195, 0xc3, 0x40, &(0x7f00000000c0)={0xa, 0x4e21, 0x6a, @loopback, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262c", 0x52, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) 14:29:58 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x17, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800050000000001000000000000b1540000ff030008dd8e74b678810018000000000000002900000004000000000000"], 0x30}}], 0x2, 0x0) 14:29:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 551.727813] 9pnet: p9_fd_create_unix (5266): problem connecting socket: ./file0/../file0: -111 14:29:58 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) 14:29:58 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xa9c9, 0x0, 0xfffffffd, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x1, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="626f74408603aacef9e4ee28f10ccdb680413f902e9da8758d2334638496095d9f7bfb8f1da9d2e491b7ef9da47fe68fbf669108b9029c2fcc844a81448c78536a0355a69dd9806e694cb9f5d0990374fc3d27d6a06188b05d8fd39d05a1953adce36d43fb6a0d0cb1f4743666629464c85b1d0aee129368f59d09b4e63bf58826a5d5a758e6be5a779efcc4bdcc4d0c5ee7e131f1b731f3d85ed0fa627597a122b31490816b0c0e2400306e9849eaae32a99e575707eb2a6f7a34fcd1018a00deff612b7bddcb9149ceb44b358743e8a8480f00578c8b7bacbc8230f33d0247a9bca4c7406cd856539de837bd579e1c", 0xf0, 0x80000000}, {&(0x7f0000000300)="c0289b7ee03850dadf84bacfa2bc294fdd8dd77f4f5053ac97e7461114c4c29d1337771b22af6b0810d649470e93e24ea35fb05b4407e3392f242e6c", 0x3c, 0x7}, {&(0x7f0000000340)="f2a31707f1525d3985d9954253589815127d15120794812dcf26cd77799d949a5254344dc62cc788585d6d36660b8a8344ede7c8d5fc96d1aa2a751b36a69df0504bedeb25d254c668147d5730ac11baab8006f8561dd300c1652ac6af1358d1c4e7b4427b8d6b549a62f22eaba3b0793bdf902fafe756df6ac26b32f08ad20c92730e7e", 0x84, 0x8}, {&(0x7f0000000400)="8b72fab8bfa73cceb0c7838998375217c6cda2eea4c6ff7bbb3bdf8363c37a8ad7cfa268dec2bda6b3acc88e2d9256e7d4111c43ccccd54e6525997819e76ea3a1023fbfc91384", 0x47, 0x6}, {&(0x7f0000000480)="d24ef3e1dc2b89ba16e87aa7677e6cf7f02df36e63cf47ec344d48ae783b235078b9db5a8342f2607a03ccd0a64ef3c82219cd63422bc6b33a80b3606affb453d10a64ee98945561076d77817cd507307af4c75c67c586a61f0bb48f05bdf62600d3fb5a9a6e0e194e4b8744d08bb37b7c0f06d32643426f37daac52b7da0dc904434adb7b2e554724d470fcacc371d941d494126909296ac85bb17fa2640cb5231250be7f41b51bd01a6d121d2a524a77cf1d2664c0396f26d8d7da2d85", 0xbe, 0x2}], 0x62000, &(0x7f0000000640)={[{'*\'@{+--'}, {'.'}], [{@subj_type={'subj_type', 0x3d, '/]'}}, {@smackfshat={'smackfshat', 0x3d, '&$'}}, {@uid_lt={'uid<', r2}}, {@uid_lt={'uid<', r3}}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_role}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) umount2(&(0x7f0000000140)='./file1\x00', 0xc) 14:29:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000001740)={0x1f, 0x0, @none, 0x29, 0x2}, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r3 = syz_io_uring_complete(r2) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x800, 0x0, {0x0, r4}}, 0x1f) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) 14:29:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 551.767733] 9pnet: p9_fd_create_unix (5278): problem connecting socket: ./file0/../file0: -111 [ 551.821691] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz-executor.1: bad orphan inode 301979167 [ 551.825297] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 564.750100] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:30:18 executing program 5: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:30:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f0800450000780000000000119078ffffffff0000000000004e200064907802000000000000000000000060e9eca51b913db8f2e8c451c6492a93273f3e5a81aebb3fe1580051a1657cdcef341ef94e110714760ac1b8462700f336cd250a0cb728d6ee8892d6f675cca0eefe4b0b"], 0x0) 14:30:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000001540)) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='syz', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 14:30:18 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="601c6d6b646f73662a7b3b00088001000240000004f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000000040)={[{@fat=@uid}]}) 14:30:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:30:18 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x2, "77004a6efdff0000000008002600", 0xffffffff, 0x401}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000440)={0x8, 0x3ff, 0x1ff, 0xffffffffffff0000, 0x7fff, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$FITRIM(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x0, 0x4}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'rose0\x00'}) fallocate(0xffffffffffffffff, 0x22, 0x7, 0x8800000) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/280], &(0x7f0000000540)=0x10a) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x69, 0x1, 0x9, "b0d3d02fae1764137e7e3771bacd7fc2", "9bd29ed441a97ad6b9b9230b9f3ec7c833726c926b22123179319ef128b9cc1396fa9dabd7a3639a1c704e9503b5033d23d7f655ef49556fa2617fa9c23fff11c1caea4925ca6802aef8fe00b1d7f9ce1a86ab18"}, 0x69, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 14:30:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(0xffffffffffffffff, r1, 0x0, 0x9bbb) 14:30:18 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) [ 572.214700] FAT-fs (loop4): Directory bread(block 3) failed 14:30:18 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:30:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x4206) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140)) pwrite64(r0, &(0x7f0000000040)="f3ed062d861ce83a355b1f02951b122a9dec48a9bc5da2bd9c2b93245687680e71aad70d231806e719d8abe58a0f", 0x2e, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) geteuid() fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000080)=@v3={0x3000000, [{0x200, 0x6}, {0x5, 0x1}], 0xee00}, 0x18, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0xc0182101, &(0x7f0000000440)) 14:30:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:30:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000003200)='./file1\x00', 0x3) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000001300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) dup3(r2, r3, 0x0) r4 = syz_io_uring_complete(0x0) dup3(0xffffffffffffffff, r4, 0x80000) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) r5 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x4, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000180)="01f6b204f90faa57dfbd7a9fe68f6d588207b0b1f77c", 0x16, 0x1}, {&(0x7f0000000280)="46ecb5b56866772b028bd441b467ac2e14cb266d192842ef2a3d175b02b42c5709918aca251e4a7e0240abb6d78b8973c387a93204cd68c889428435892b417d7a35900169e04cc21d984434e6f1540b6bcc875b", 0x54, 0xdd6}], 0x24000, &(0x7f0000000300)={[{@dots}, {@nodots}, {@fat=@nocase}], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}) unlinkat(r5, &(0x7f0000000340)='./file1\x00', 0x0) 14:30:19 executing program 5: timerfd_create(0x0, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 572.346328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:30:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(0xffffffffffffffff, r1, 0x0, 0x9bbb) 14:30:19 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:30:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 572.496207] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 14:30:19 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 14:30:19 executing program 5: clone3(0x0, 0x0) [ 585.674748] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:30:40 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) 14:30:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:30:40 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@local, 0x78, r6}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) 14:30:40 executing program 5: clone3(0x0, 0x0) 14:30:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r0, 0x0) 14:30:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[]) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xe7a, 0x86000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1002010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@aname={'aname', 0x3d, '-](]'}}, {@fscache}, {@version_9p2000}, {@version_L}], [{@obj_user={'obj_user', 0x3d, '+&'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@seclabel}, {@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '[))..[\xe5++($['}}, {@measure}, {@dont_measure}, {@seclabel}]}}) 14:30:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, 0xffffffffffffffff, 0x0, 0x9bbb) 14:30:40 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 593.837395] FAT-fs (loop4): bogus number of reserved sectors [ 593.838690] FAT-fs (loop4): Can't find a valid FAT filesystem 14:30:40 executing program 5: clone3(0x0, 0x0) [ 593.969664] FAT-fs (loop4): bogus number of reserved sectors [ 593.970947] FAT-fs (loop4): Can't find a valid FAT filesystem 14:30:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:30:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="f2c0b00a0a73e255b2c66a3b572734f9f2960489bcfd1baa89d409e4b00ba17439ba84201bd4ee5ec6fa3255c411066d8d4158cb9c5c939f34cece2183a114d70870", 0x42}, {&(0x7f0000000140)="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", 0xfc0}], 0x2, 0xfff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) write(r0, &(0x7f0000001180)="7dbe943da6e1acab4456ec022b055bc71a9b58711881f05d70663b9f36fe634432f1c3362f37c9f3493fd3b958da850a0d8c6e16b5f62daa7b8953a5279a3d51bd3d1eb412ca571bd4ee8addc0f65c6a518cc6662c0606c449600864b5843bbcf249786297178f7c80f37291c7d69b762d1c3dcec6abe607f3efd6d62acd1a26cee95de198479d35a9c5529d2cda10ea3aa121f7b956e1be4426fc0fbf8003", 0x9f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r0, 0x0, 0x2) [ 594.016414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:30:40 executing program 7: r0 = syz_mount_image$nfs4(0x0, &(0x7f0000000540)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000003200)='./file1\x00', &(0x7f0000003240), &(0x7f00000005c0)='system_u:object_r:sudo_exec_t:s0\x00', 0x9, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x80382, 0x8) 14:30:40 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:30:40 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) fallocate(r1, 0x0, 0x0, 0x4100) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000100)={0x0, 0x10, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)={{0x3, 0x1, 0x8b, 0x3, 0x7}, 0x401, 0x24}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) 14:30:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, 0xffffffffffffffff, 0x0, 0x9bbb) 14:30:40 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 14:30:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 594.283193] FAULT_INJECTION: forcing a failure. [ 594.283193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 594.285608] CPU: 1 PID: 5419 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 594.287021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.288683] Call Trace: [ 594.289222] dump_stack+0x107/0x167 [ 594.289608] SELinux: Context system_u: is not valid (left unmapped). [ 594.289968] should_fail.cold+0x5/0xa [ 594.289997] _copy_from_user+0x2e/0x1b0 [ 594.290022] copy_clone_args_from_user+0x147/0x790 [ 594.293947] ? __lockdep_reset_lock+0x180/0x180 [ 594.294895] ? sighand_ctor+0x40/0x40 [ 594.295662] ? find_held_lock+0x2c/0x110 [ 594.296489] ? ksys_write+0x21a/0x260 [ 594.297262] ? lock_downgrade+0x6d0/0x6d0 [ 594.298121] __do_sys_clone3+0x9d/0x320 [ 594.298922] ? __do_sys_clone+0x110/0x110 [ 594.299761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 594.300738] ? wait_for_completion+0x270/0x270 [ 594.301661] ? rcu_read_lock_any_held+0x75/0xa0 [ 594.302608] ? vfs_write+0x354/0xa30 [ 594.303371] ? fput_many+0x2f/0x1a0 [ 594.304102] ? ksys_write+0x1a9/0x260 [ 594.304879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.305943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 594.306989] ? trace_hardirqs_on+0x5b/0x180 [ 594.307856] do_syscall_64+0x33/0x40 [ 594.308609] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 594.309639] RIP: 0033:0x7f920ce96b19 [ 594.310407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.314149] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 594.315698] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 594.317141] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 594.318602] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.320050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.321499] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:30:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="44f4ff00", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000180)) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @generic={0x39, "703884d221b597253e571973803c"}, @ax25={0x3, @null, 0x7}, @nfc={0x27, 0x1, 0x1, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='netdevsim0\x00', 0x20, 0x5}) 14:30:41 executing program 7: openat(0xffffffffffffffff, 0x0, 0x4000, 0x14) readv(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) flistxattr(r1, &(0x7f0000000080)=""/132, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) 14:30:41 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:30:41 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 14:30:41 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 594.566247] FAULT_INJECTION: forcing a failure. [ 594.566247] name failslab, interval 1, probability 0, space 0, times 1 [ 594.568653] CPU: 1 PID: 5437 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 594.570041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 594.571703] Call Trace: [ 594.572240] dump_stack+0x107/0x167 [ 594.572975] should_fail.cold+0x5/0xa [ 594.573731] ? copy_process+0x4386/0x66f0 [ 594.574589] should_failslab+0x5/0x20 [ 594.575361] kmem_cache_alloc_node+0x55/0x370 [ 594.576267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.577344] copy_process+0x4386/0x66f0 [ 594.578159] ? find_held_lock+0x2c/0x110 [ 594.579000] ? __might_fault+0xd3/0x180 [ 594.579819] ? lock_downgrade+0x6d0/0x6d0 [ 594.580675] ? __cleanup_sighand+0xb0/0xb0 [ 594.581549] ? _copy_from_user+0xfb/0x1b0 [ 594.582387] kernel_clone+0xe7/0xa20 [ 594.583151] ? __lockdep_reset_lock+0x180/0x180 [ 594.584109] ? copy_init_mm+0x20/0x20 [ 594.584909] ? ksys_write+0x21a/0x260 [ 594.585690] ? lock_downgrade+0x6d0/0x6d0 [ 594.586566] __do_sys_clone3+0x1e5/0x320 [ 594.587398] ? __do_sys_clone+0x110/0x110 [ 594.588269] ? rcu_read_lock_any_held+0x75/0xa0 [ 594.589212] ? vfs_write+0x354/0xa30 [ 594.589978] ? fput_many+0x2f/0x1a0 [ 594.590720] ? ksys_write+0x1a9/0x260 [ 594.591510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 594.592590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 594.593646] ? trace_hardirqs_on+0x5b/0x180 [ 594.594552] do_syscall_64+0x33/0x40 [ 594.595316] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 594.596366] RIP: 0033:0x7f920ce96b19 [ 594.597122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 594.600888] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 594.602375] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 594.603794] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 594.605214] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.606647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.608060] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 594.662754] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 607.448819] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:31:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1}], 0x1}, 0x0) 14:31:01 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:31:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, 0xffffffffffffffff, 0x0, 0x9bbb) 14:31:01 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:31:01 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:01 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 14:31:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:01 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) fallocate(r1, 0x0, 0x0, 0x4100) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000100)={0x0, 0x10, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)={{0x3, 0x1, 0x8b, 0x3, 0x7}, 0x401, 0x24}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x4) [ 614.960362] FAULT_INJECTION: forcing a failure. [ 614.960362] name failslab, interval 1, probability 0, space 0, times 0 [ 614.962794] CPU: 0 PID: 5472 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 614.964240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.965975] Call Trace: [ 614.966537] dump_stack+0x107/0x167 [ 614.967288] should_fail.cold+0x5/0xa [ 614.968077] ? create_object.isra.0+0x3a/0xa20 [ 614.969024] should_failslab+0x5/0x20 [ 614.969820] kmem_cache_alloc+0x5b/0x360 [ 614.970687] create_object.isra.0+0x3a/0xa20 [ 614.971597] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 614.972662] kmem_cache_alloc_node+0x169/0x370 [ 614.973628] copy_process+0x4386/0x66f0 [ 614.974468] ? find_held_lock+0x2c/0x110 [ 614.975317] ? __might_fault+0xd3/0x180 [ 614.976143] ? lock_downgrade+0x6d0/0x6d0 [ 614.977031] ? __cleanup_sighand+0xb0/0xb0 [ 614.977910] ? _copy_from_user+0xfb/0x1b0 [ 614.978779] kernel_clone+0xe7/0xa20 [ 614.979553] ? __lockdep_reset_lock+0x180/0x180 [ 614.980513] ? copy_init_mm+0x20/0x20 [ 614.981302] ? ksys_write+0x21a/0x260 [ 614.982097] ? lock_downgrade+0x6d0/0x6d0 [ 614.982961] __do_sys_clone3+0x1e5/0x320 [ 614.983800] ? __do_sys_clone+0x110/0x110 [ 614.984670] ? rcu_read_lock_any_held+0x75/0xa0 [ 614.985613] ? vfs_write+0x354/0xa30 [ 614.986402] ? fput_many+0x2f/0x1a0 [ 614.987165] ? ksys_write+0x1a9/0x260 [ 614.987965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 614.989047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 614.990113] ? trace_hardirqs_on+0x5b/0x180 [ 614.990996] do_syscall_64+0x33/0x40 [ 614.991780] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 614.992847] RIP: 0033:0x7f920ce96b19 [ 614.993610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 614.997423] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 614.998993] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 615.000463] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 615.001988] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 615.003515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.004989] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:31:01 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) recvfrom$inet(r2, &(0x7f0000000140)=""/208, 0xd0, 0x102, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) [ 615.104947] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 615.115617] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 615.173723] 9pnet: Insufficient options for proto=fd [ 628.162357] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:31:14 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:14 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) recvfrom$inet(r2, &(0x7f0000000140)=""/208, 0xd0, 0x102, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) 14:31:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:31:14 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:14 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 14:31:14 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:31:14 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) [ 628.212694] FAULT_INJECTION: forcing a failure. [ 628.212694] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 628.215140] CPU: 0 PID: 5512 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 628.216524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.218224] Call Trace: [ 628.218768] dump_stack+0x107/0x167 [ 628.219515] should_fail.cold+0x5/0xa [ 628.220297] __alloc_pages_nodemask+0x182/0x680 [ 628.221232] ? lock_downgrade+0x6d0/0x6d0 [ 628.222074] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 628.223282] ? memcg_slab_post_alloc_hook+0x183/0x3f0 [ 628.224343] ? rcu_read_lock_sched_held+0x3e/0x80 [ 628.225316] ? kmem_cache_alloc_node+0x2ca/0x370 [ 628.226303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.227363] copy_process+0x60a/0x66f0 [ 628.228162] ? find_held_lock+0x2c/0x110 [ 628.228987] ? __might_fault+0xd3/0x180 [ 628.229798] ? lock_downgrade+0x6d0/0x6d0 [ 628.230649] ? __cleanup_sighand+0xb0/0xb0 [ 628.231522] ? _copy_from_user+0xfb/0x1b0 [ 628.232369] kernel_clone+0xe7/0xa20 [ 628.233129] ? __lockdep_reset_lock+0x180/0x180 [ 628.234082] ? copy_init_mm+0x20/0x20 [ 628.234885] ? ksys_write+0x21a/0x260 [ 628.235663] ? lock_downgrade+0x6d0/0x6d0 [ 628.236513] __do_sys_clone3+0x1e5/0x320 [ 628.237333] ? __do_sys_clone+0x110/0x110 [ 628.238187] ? rcu_read_lock_any_held+0x75/0xa0 [ 628.239154] ? vfs_write+0x354/0xa30 [ 628.239918] ? fput_many+0x2f/0x1a0 [ 628.240662] ? ksys_write+0x1a9/0x260 [ 628.241448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.242530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 628.243580] ? trace_hardirqs_on+0x5b/0x180 [ 628.244466] do_syscall_64+0x33/0x40 [ 628.245233] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 628.246283] RIP: 0033:0x7f920ce96b19 [ 628.247045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.250811] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 628.252368] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 628.253800] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 628.255265] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.256717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.258187] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:31:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:15 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) recvfrom$inet(r2, &(0x7f0000000140)=""/208, 0xd0, 0x102, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) [ 628.367834] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 628.372644] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:31:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:15 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) [ 628.467987] 9pnet_virtio: no channels available for device ./file0/../file0 [ 628.490605] FAULT_INJECTION: forcing a failure. [ 628.490605] name failslab, interval 1, probability 0, space 0, times 0 [ 628.492930] CPU: 1 PID: 5531 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 628.494319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.495991] Call Trace: [ 628.496534] dump_stack+0x107/0x167 [ 628.497268] should_fail.cold+0x5/0xa [ 628.498032] ? prepare_creds+0x25/0x5f0 [ 628.498882] should_failslab+0x5/0x20 [ 628.499645] kmem_cache_alloc+0x5b/0x360 [ 628.500457] ? lock_downgrade+0x6d0/0x6d0 [ 628.501292] prepare_creds+0x25/0x5f0 [ 628.502063] copy_creds+0x72/0x580 [ 628.502791] copy_process+0xee8/0x66f0 [ 628.503585] ? find_held_lock+0x2c/0x110 [ 628.504425] ? __might_fault+0xd3/0x180 [ 628.505239] ? lock_downgrade+0x6d0/0x6d0 [ 628.506088] ? __cleanup_sighand+0xb0/0xb0 [ 628.506963] ? _copy_from_user+0xfb/0x1b0 [ 628.507816] kernel_clone+0xe7/0xa20 [ 628.508576] ? __lockdep_reset_lock+0x180/0x180 [ 628.509530] ? copy_init_mm+0x20/0x20 [ 628.510337] ? ksys_write+0x21a/0x260 [ 628.511116] ? lock_downgrade+0x6d0/0x6d0 [ 628.511957] __do_sys_clone3+0x1e5/0x320 [ 628.512786] ? __do_sys_clone+0x110/0x110 [ 628.513644] ? rcu_read_lock_any_held+0x75/0xa0 [ 628.514626] ? vfs_write+0x354/0xa30 [ 628.515401] ? fput_many+0x2f/0x1a0 [ 628.516135] ? ksys_write+0x1a9/0x260 [ 628.516911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.517967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 628.519008] ? trace_hardirqs_on+0x5b/0x180 [ 628.519877] do_syscall_64+0x33/0x40 [ 628.520632] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 628.521660] RIP: 0033:0x7f920ce96b19 [ 628.522424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.526121] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 628.527656] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 628.529089] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 628.530531] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.531955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.533392] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:31:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:31:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:15 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:15 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) [ 628.739177] 9pnet_virtio: no channels available for device ./file0/../file0 14:31:15 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:15 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:31:15 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 628.865816] FAULT_INJECTION: forcing a failure. [ 628.865816] name failslab, interval 1, probability 0, space 0, times 0 [ 628.868300] CPU: 1 PID: 5545 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 628.869823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.871564] Call Trace: [ 628.872116] dump_stack+0x107/0x167 [ 628.872882] should_fail.cold+0x5/0xa [ 628.873667] ? create_object.isra.0+0x3a/0xa20 [ 628.874623] should_failslab+0x5/0x20 [ 628.875408] kmem_cache_alloc+0x5b/0x360 [ 628.876250] ? create_object.isra.0+0x3ad/0xa20 [ 628.877208] create_object.isra.0+0x3a/0xa20 [ 628.878096] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 628.878202] 9pnet_virtio: no channels available for device ./file0/../file0 [ 628.879152] __kmalloc_node+0x1ae/0x4b0 [ 628.879185] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 628.881812] memcg_slab_post_alloc_hook+0x1f9/0x3f0 [ 628.882835] ? trace_hardirqs_on+0x5b/0x180 [ 628.883721] kmem_cache_alloc_node+0x181/0x370 [ 628.884659] copy_process+0x4386/0x66f0 [ 628.885468] ? find_held_lock+0x2c/0x110 [ 628.886316] ? __might_fault+0xd3/0x180 [ 628.887122] ? lock_downgrade+0x6d0/0x6d0 [ 628.887999] ? __cleanup_sighand+0xb0/0xb0 [ 628.888868] ? _copy_from_user+0xfb/0x1b0 [ 628.889718] kernel_clone+0xe7/0xa20 [ 628.890492] ? __lockdep_reset_lock+0x180/0x180 [ 628.891435] ? copy_init_mm+0x20/0x20 [ 628.892224] ? ksys_write+0x21a/0x260 [ 628.892998] ? lock_downgrade+0x6d0/0x6d0 [ 628.893840] __do_sys_clone3+0x1e5/0x320 [ 628.894671] ? __do_sys_clone+0x110/0x110 [ 628.895539] ? rcu_read_lock_any_held+0x75/0xa0 [ 628.896481] ? vfs_write+0x354/0xa30 [ 628.897249] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 628.898185] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 628.899313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.900376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 628.901422] ? trace_hardirqs_on+0x5b/0x180 [ 628.902322] do_syscall_64+0x33/0x40 [ 628.903075] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 628.904136] RIP: 0033:0x7f920ce96b19 14:31:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 628.904888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.908762] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 628.910330] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 628.911768] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 628.913204] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.914657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.916095] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 628.998063] 9pnet: p9_fd_create_unix (5554): problem connecting socket: ./file0/../file0: -111 14:31:15 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) 14:31:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 629.186873] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 629.206443] 9pnet: p9_fd_create_unix (5561): problem connecting socket: ./file0/../file0: -111 [ 641.927596] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 649.315606] FAULT_INJECTION: forcing a failure. [ 649.315606] name failslab, interval 1, probability 0, space 0, times 0 [ 649.317410] CPU: 1 PID: 5575 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 649.318429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 649.318761] 9pnet: p9_fd_create_unix (5574): problem connecting socket: ./file0/../file0: -111 [ 649.319667] Call Trace: [ 649.319691] dump_stack+0x107/0x167 [ 649.319718] should_fail.cold+0x5/0xa 14:31:36 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 14:31:36 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:31:36 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:36 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) 14:31:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:36 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) unshare(0x48020200) 14:31:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 649.323364] ? security_prepare_creds+0x112/0x190 [ 649.324234] should_failslab+0x5/0x20 [ 649.324846] __kmalloc+0x72/0x3f0 [ 649.325382] security_prepare_creds+0x112/0x190 [ 649.326084] prepare_creds+0x458/0x5f0 [ 649.326671] copy_creds+0x72/0x580 [ 649.327208] copy_process+0xee8/0x66f0 [ 649.327790] ? find_held_lock+0x2c/0x110 [ 649.328411] ? __might_fault+0xd3/0x180 [ 649.329016] ? lock_downgrade+0x6d0/0x6d0 [ 649.329651] ? __cleanup_sighand+0xb0/0xb0 [ 649.330297] ? _copy_from_user+0xfb/0x1b0 [ 649.330931] kernel_clone+0xe7/0xa20 [ 649.331493] ? __lockdep_reset_lock+0x180/0x180 [ 649.332202] ? copy_init_mm+0x20/0x20 [ 649.332786] ? ksys_write+0x21a/0x260 [ 649.333358] ? lock_downgrade+0x6d0/0x6d0 [ 649.333978] __do_sys_clone3+0x1e5/0x320 [ 649.334601] ? __do_sys_clone+0x110/0x110 [ 649.335256] ? rcu_read_lock_any_held+0x75/0xa0 [ 649.335939] ? vfs_write+0x354/0xa30 [ 649.336497] ? fput_many+0x2f/0x1a0 [ 649.337040] ? ksys_write+0x1a9/0x260 [ 649.337626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 649.338427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 649.339205] ? trace_hardirqs_on+0x5b/0x180 [ 649.339852] do_syscall_64+0x33/0x40 [ 649.340416] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 649.341192] RIP: 0033:0x7f920ce96b19 [ 649.341768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.344611] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 649.345764] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 649.346887] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 649.348011] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 649.349119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.350211] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 649.359521] 9pnet: p9_fd_create_unix (5582): problem connecting socket: ./file0/../file0: -111 [ 649.371769] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:31:36 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 14:31:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 649.623111] FAULT_INJECTION: forcing a failure. [ 649.623111] name failslab, interval 1, probability 0, space 0, times 0 [ 649.624915] CPU: 1 PID: 5595 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 649.625969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 649.627264] Call Trace: [ 649.627685] dump_stack+0x107/0x167 [ 649.628265] should_fail.cold+0x5/0xa [ 649.628857] ? create_object.isra.0+0x3a/0xa20 [ 649.629561] should_failslab+0x5/0x20 [ 649.630145] kmem_cache_alloc+0x5b/0x360 [ 649.630793] create_object.isra.0+0x3a/0xa20 [ 649.631481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 649.632278] __kmalloc+0x16e/0x3f0 [ 649.632844] security_prepare_creds+0x112/0x190 [ 649.633573] prepare_creds+0x458/0x5f0 [ 649.634191] copy_creds+0x72/0x580 [ 649.634776] copy_process+0xee8/0x66f0 [ 649.635397] ? find_held_lock+0x2c/0x110 [ 649.636042] ? __might_fault+0xd3/0x180 [ 649.636676] ? lock_downgrade+0x6d0/0x6d0 [ 649.637336] ? __cleanup_sighand+0xb0/0xb0 [ 649.638015] ? _copy_from_user+0xfb/0x1b0 [ 649.638683] kernel_clone+0xe7/0xa20 [ 649.639269] ? __lockdep_reset_lock+0x180/0x180 [ 649.640007] ? copy_init_mm+0x20/0x20 [ 649.640623] ? ksys_write+0x21a/0x260 [ 649.641226] ? lock_downgrade+0x6d0/0x6d0 [ 649.641885] __do_sys_clone3+0x1e5/0x320 [ 649.642534] ? __do_sys_clone+0x110/0x110 [ 649.643202] ? rcu_read_lock_any_held+0x75/0xa0 [ 649.643940] ? vfs_write+0x354/0xa30 [ 649.644544] ? fput_many+0x2f/0x1a0 [ 649.645121] ? ksys_write+0x1a9/0x260 [ 649.645733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 649.646578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 649.647395] ? trace_hardirqs_on+0x5b/0x180 [ 649.648079] do_syscall_64+0x33/0x40 [ 649.648675] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 649.649488] RIP: 0033:0x7f920ce96b19 [ 649.650078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.652962] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 649.654147] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 649.655275] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 649.656396] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 649.657523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.658651] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:31:36 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) recvfrom$inet(r2, &(0x7f0000000140)=""/208, 0xd0, 0x102, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) [ 650.002633] 9pnet: p9_fd_create_unix (5599): problem connecting socket: ./file0/../file0: -111 [ 650.068786] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 662.363769] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 671.986336] FAULT_INJECTION: forcing a failure. [ 671.986336] name failslab, interval 1, probability 0, space 0, times 0 [ 671.988744] CPU: 1 PID: 5612 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 671.990122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 671.991802] Call Trace: [ 671.992342] dump_stack+0x107/0x167 [ 671.993083] should_fail.cold+0x5/0xa [ 671.993858] ? __delayacct_tsk_init+0x1b/0x80 [ 671.994790] should_failslab+0x5/0x20 [ 671.995571] kmem_cache_alloc+0x5b/0x360 [ 671.996388] ? prepare_creds+0x46c/0x5f0 [ 671.997214] __delayacct_tsk_init+0x1b/0x80 [ 671.998085] copy_process+0x441a/0x66f0 [ 671.999110] ? find_held_lock+0x2c/0x110 [ 672.000106] ? __might_fault+0xd3/0x180 [ 672.000923] ? __cleanup_sighand+0xb0/0xb0 [ 672.001785] ? _copy_from_user+0xfb/0x1b0 [ 672.002628] kernel_clone+0xe7/0xa20 [ 672.003396] ? __lockdep_reset_lock+0x180/0x180 [ 672.004331] ? copy_init_mm+0x20/0x20 [ 672.005115] ? ksys_write+0x21a/0x260 [ 672.005881] ? lock_downgrade+0x6d0/0x6d0 14:31:58 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 14:31:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:31:58 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:31:58 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) recvfrom$inet(r2, &(0x7f0000000140)=""/208, 0xd0, 0x102, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) 14:31:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffd, 0x8, 0x4, @buffer={0x0, 0xe4, &(0x7f0000000000)=""/228}, &(0x7f0000000100)="36e5c420d5c19dd0", &(0x7f0000000140)=""/50, 0x1f, 0x12, 0x1, &(0x7f00000001c0)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x7f}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x8, 0x6c, 0x9, 0x7f, 0x0, 0x81, 0x8, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000280), 0xc}, 0x10000, 0x8, 0xe812, 0x1, 0x8, 0xfffffffe, 0xfffe, 0x0, 0x101, 0x0, 0xacf}, 0x0, 0x10, r2, 0x8) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x80010, r2, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r1}, 0x101) 14:31:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:58 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) 14:31:58 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 672.006816] __do_sys_clone3+0x1e5/0x320 [ 672.007735] ? __do_sys_clone+0x110/0x110 [ 672.008593] ? rcu_read_lock_any_held+0x75/0xa0 [ 672.009526] ? vfs_write+0x354/0xa30 [ 672.010282] ? fput_many+0x2f/0x1a0 [ 672.011039] ? ksys_write+0x1a9/0x260 [ 672.011815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 672.012872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.013908] ? trace_hardirqs_on+0x5b/0x180 [ 672.014795] do_syscall_64+0x33/0x40 [ 672.015552] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 672.016590] RIP: 0033:0x7f920ce96b19 [ 672.017344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.021048] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 672.022587] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 672.023906] audit: type=1400 audit(1671460318.781:22): avc: denied { map } for pid=5615 comm="syz-executor.4" path="pipe:[19997]" dev="pipefs" ino=19997 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 672.024041] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 672.024053] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.024064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.024075] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 672.034999] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 672.039284] 9pnet: p9_fd_create_unix (5618): problem connecting socket: ./file0/../file0: -111 [ 672.064130] audit: type=1400 audit(1671460318.781:23): avc: denied { execute } for pid=5615 comm="syz-executor.4" path="pipe:[19997]" dev="pipefs" ino=19997 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 14:31:58 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) recvfrom$inet(r2, &(0x7f0000000140)=""/208, 0xd0, 0x102, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10) 14:31:58 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) [ 672.189909] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 672.196333] FAULT_INJECTION: forcing a failure. [ 672.196333] name failslab, interval 1, probability 0, space 0, times 0 [ 672.198760] CPU: 1 PID: 5636 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 672.200221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.201950] Call Trace: [ 672.202501] dump_stack+0x107/0x167 [ 672.203264] should_fail.cold+0x5/0xa [ 672.204047] ? create_object.isra.0+0x3a/0xa20 [ 672.204982] should_failslab+0x5/0x20 [ 672.205762] kmem_cache_alloc+0x5b/0x360 [ 672.206610] create_object.isra.0+0x3a/0xa20 [ 672.207553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 672.208619] kmem_cache_alloc+0x159/0x360 [ 672.209486] ? prepare_creds+0x46c/0x5f0 [ 672.210339] __delayacct_tsk_init+0x1b/0x80 [ 672.211232] copy_process+0x441a/0x66f0 [ 672.212049] ? find_held_lock+0x2c/0x110 [ 672.212893] ? __might_fault+0xd3/0x180 [ 672.213721] ? __cleanup_sighand+0xb0/0xb0 [ 672.214599] ? _copy_from_user+0xfb/0x1b0 [ 672.215471] kernel_clone+0xe7/0xa20 [ 672.216252] ? __lockdep_reset_lock+0x180/0x180 [ 672.217209] ? copy_init_mm+0x20/0x20 [ 672.218009] ? ksys_write+0x21a/0x260 [ 672.218819] ? lock_downgrade+0x6d0/0x6d0 [ 672.219692] __do_sys_clone3+0x1e5/0x320 [ 672.220544] ? __do_sys_clone+0x110/0x110 [ 672.221435] ? rcu_read_lock_any_held+0x75/0xa0 [ 672.222398] ? vfs_write+0x354/0xa30 [ 672.223190] ? fput_many+0x2f/0x1a0 [ 672.223955] ? ksys_write+0x1a9/0x260 [ 672.224760] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 672.225841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.226916] ? trace_hardirqs_on+0x5b/0x180 [ 672.227819] do_syscall_64+0x33/0x40 [ 672.228600] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 672.229649] RIP: 0033:0x7f920ce96b19 [ 672.230424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.234269] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 672.235840] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 672.237316] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 672.238794] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.240271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.241733] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 672.328320] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 672.353098] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 14:31:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:59 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) 14:31:59 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) 14:31:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:31:59 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 14:31:59 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:31:59 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 672.602477] 9pnet: p9_fd_create_unix (5647): problem connecting socket: ./file0/../file0: -111 [ 672.644165] FAULT_INJECTION: forcing a failure. [ 672.644165] name failslab, interval 1, probability 0, space 0, times 0 [ 672.646340] CPU: 1 PID: 5651 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 672.647643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.649225] Call Trace: [ 672.649735] dump_stack+0x107/0x167 [ 672.650434] should_fail.cold+0x5/0xa [ 672.651192] ? dup_fd+0x89/0xcb0 [ 672.651855] should_failslab+0x5/0x20 [ 672.652582] kmem_cache_alloc+0x5b/0x360 [ 672.653365] dup_fd+0x89/0xcb0 [ 672.653969] ? audit_filter_inodes+0x40/0x40 [ 672.654802] ? security_task_alloc+0xe6/0x260 [ 672.655638] copy_process+0x1875/0x66f0 [ 672.656364] ? find_held_lock+0x2c/0x110 [ 672.657122] ? __cleanup_sighand+0xb0/0xb0 [ 672.657900] ? _copy_from_user+0xfb/0x1b0 [ 672.658667] kernel_clone+0xe7/0xa20 [ 672.659354] ? __lockdep_reset_lock+0x180/0x180 [ 672.660200] ? copy_init_mm+0x20/0x20 [ 672.660910] ? ksys_write+0x21a/0x260 [ 672.661596] ? lock_downgrade+0x6d0/0x6d0 [ 672.662348] __do_sys_clone3+0x1e5/0x320 [ 672.663098] ? __do_sys_clone+0x110/0x110 [ 672.663863] ? rcu_read_lock_any_held+0x75/0xa0 [ 672.664695] ? vfs_write+0x354/0xa30 [ 672.665370] ? fput_many+0x2f/0x1a0 [ 672.666025] ? ksys_write+0x1a9/0x260 [ 672.666718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 672.667680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.668626] ? trace_hardirqs_on+0x5b/0x180 [ 672.669426] do_syscall_64+0x33/0x40 [ 672.670111] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 672.671065] RIP: 0033:0x7f920ce96b19 [ 672.671744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.675057] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 672.676446] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 672.677728] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 672.679025] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.680330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.681630] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 672.722148] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:31:59 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) pipe(&(0x7f00000001c0)) 14:31:59 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:31:59 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 14:31:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:31:59 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) [ 672.912014] FAULT_INJECTION: forcing a failure. [ 672.912014] name failslab, interval 1, probability 0, space 0, times 0 [ 672.913722] CPU: 1 PID: 5666 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 672.914707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 672.915917] Call Trace: [ 672.916315] dump_stack+0x107/0x167 [ 672.916850] should_fail.cold+0x5/0xa [ 672.917407] ? create_object.isra.0+0x3a/0xa20 [ 672.918069] should_failslab+0x5/0x20 [ 672.918632] kmem_cache_alloc+0x5b/0x360 [ 672.919239] create_object.isra.0+0x3a/0xa20 [ 672.919891] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 672.920633] kmem_cache_alloc+0x159/0x360 [ 672.921256] dup_fd+0x89/0xcb0 [ 672.921731] ? audit_filter_inodes+0x40/0x40 [ 672.922389] ? security_task_alloc+0xe6/0x260 [ 672.923060] copy_process+0x1875/0x66f0 [ 672.923635] ? find_held_lock+0x2c/0x110 [ 672.924245] ? __cleanup_sighand+0xb0/0xb0 [ 672.924869] ? _copy_from_user+0xfb/0x1b0 [ 672.925492] kernel_clone+0xe7/0xa20 [ 672.926019] ? __lockdep_reset_lock+0x180/0x180 [ 672.926707] ? copy_init_mm+0x20/0x20 [ 672.927297] ? ksys_write+0x21a/0x260 [ 672.927859] ? lock_downgrade+0x6d0/0x6d0 [ 672.928482] __do_sys_clone3+0x1e5/0x320 [ 672.929065] ? __do_sys_clone+0x110/0x110 [ 672.929709] ? rcu_read_lock_any_held+0x75/0xa0 [ 672.930435] ? vfs_write+0x354/0xa30 [ 672.931023] ? fput_many+0x2f/0x1a0 [ 672.931590] ? ksys_write+0x1a9/0x260 [ 672.932193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 672.933002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 672.933800] ? trace_hardirqs_on+0x5b/0x180 [ 672.934461] do_syscall_64+0x33/0x40 [ 672.935039] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 672.935819] RIP: 0033:0x7f920ce96b19 [ 672.936379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 672.938153] 9pnet: p9_fd_create_unix (5667): problem connecting socket: ./file0/../file0: -111 [ 672.939154] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 672.939171] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 672.939179] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 672.939187] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 672.939195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.939213] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 672.954213] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:31:59 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) 14:31:59 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:31:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 673.117100] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:31:59 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 14:31:59 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:31:59 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) [ 673.178922] FAULT_INJECTION: forcing a failure. [ 673.178922] name failslab, interval 1, probability 0, space 0, times 0 [ 673.181539] CPU: 0 PID: 5687 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 673.183083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.184988] Call Trace: [ 673.185587] dump_stack+0x107/0x167 [ 673.186407] should_fail.cold+0x5/0xa [ 673.187273] ? alloc_fdtable+0x84/0x280 [ 673.188166] should_failslab+0x5/0x20 [ 673.189022] kmem_cache_alloc_trace+0x55/0x360 [ 673.190048] ? rwlock_bug.part.0+0x90/0x90 [ 673.191043] alloc_fdtable+0x84/0x280 [ 673.191904] dup_fd+0x722/0xcb0 [ 673.192689] copy_process+0x1875/0x66f0 [ 673.193584] ? find_held_lock+0x2c/0x110 [ 673.194559] ? __cleanup_sighand+0xb0/0xb0 [ 673.195535] ? _copy_from_user+0xfb/0x1b0 14:31:59 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 673.196506] kernel_clone+0xe7/0xa20 [ 673.197439] ? __lockdep_reset_lock+0x180/0x180 [ 673.198482] ? copy_init_mm+0x20/0x20 [ 673.199388] ? ksys_write+0x21a/0x260 [ 673.200249] ? lock_downgrade+0x6d0/0x6d0 [ 673.201189] __do_sys_clone3+0x1e5/0x320 [ 673.202105] ? __do_sys_clone+0x110/0x110 [ 673.203074] ? rcu_read_lock_any_held+0x75/0xa0 [ 673.204125] ? vfs_write+0x354/0xa30 [ 673.204973] ? fput_many+0x2f/0x1a0 [ 673.205792] ? ksys_write+0x1a9/0x260 [ 673.206660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.207871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.209037] ? trace_hardirqs_on+0x5b/0x180 [ 673.210018] do_syscall_64+0x33/0x40 [ 673.210867] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 673.212017] RIP: 0033:0x7f920ce96b19 [ 673.212853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.216977] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 673.218691] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 673.220308] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 673.221908] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.223517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.225121] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 673.241220] 9pnet: p9_fd_create_unix (5682): problem connecting socket: ./file0/../file0: -111 [ 673.252949] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 687.900840] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:32:29 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:32:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:32:29 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) 14:32:29 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:32:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:32:29 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) 14:32:29 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 14:32:29 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 703.038634] FAULT_INJECTION: forcing a failure. [ 703.038634] name failslab, interval 1, probability 0, space 0, times 0 [ 703.041148] CPU: 1 PID: 5709 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 703.042632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 703.044460] Call Trace: [ 703.045059] dump_stack+0x107/0x167 [ 703.045880] should_fail.cold+0x5/0xa [ 703.046743] ? create_object.isra.0+0x3a/0xa20 [ 703.047757] should_failslab+0x5/0x20 [ 703.048583] kmem_cache_alloc+0x5b/0x360 [ 703.049471] create_object.isra.0+0x3a/0xa20 [ 703.050424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 703.051541] kmem_cache_alloc_trace+0x151/0x360 [ 703.052551] ? rwlock_bug.part.0+0x90/0x90 [ 703.053473] alloc_fdtable+0x84/0x280 [ 703.054302] dup_fd+0x722/0xcb0 [ 703.055034] ? proc_task_readdir+0xc70/0xee0 [ 703.056009] copy_process+0x1875/0x66f0 [ 703.056874] ? find_held_lock+0x2c/0x110 [ 703.057777] ? __cleanup_sighand+0xb0/0xb0 [ 703.058708] ? _copy_from_user+0xfb/0x1b0 [ 703.059629] kernel_clone+0xe7/0xa20 [ 703.060441] ? __lockdep_reset_lock+0x180/0x180 [ 703.061468] ? copy_init_mm+0x20/0x20 [ 703.062318] ? ksys_write+0x21a/0x260 [ 703.063151] ? lock_downgrade+0x6d0/0x6d0 [ 703.064088] __do_sys_clone3+0x1e5/0x320 [ 703.064994] ? __do_sys_clone+0x110/0x110 [ 703.065944] ? rcu_read_lock_any_held+0x75/0xa0 [ 703.066972] ? vfs_write+0x354/0xa30 [ 703.067808] ? fput_many+0x2f/0x1a0 [ 703.068615] ? ksys_write+0x1a9/0x260 [ 703.069461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 703.070596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 703.071730] ? trace_hardirqs_on+0x5b/0x180 [ 703.072687] do_syscall_64+0x33/0x40 [ 703.073512] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 703.074665] RIP: 0033:0x7f920ce96b19 [ 703.075507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 703.079639] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 703.080649] 9pnet: p9_fd_create_unix (5717): problem connecting socket: ./file0/../file0: -111 [ 703.081322] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 703.081336] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 703.081357] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 703.087854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.089395] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 703.158839] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 717.704653] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 726.076602] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 726.875099] 9pnet: p9_fd_create_unix (5743): problem connecting socket: ./file0/../file0: -111 14:32:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:32:53 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:32:53 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:32:53 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 14:32:53 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) 14:32:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:32:53 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0xffffffff, 0x8000, 0x2, 0xfffffffb}) 14:32:53 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 726.898405] FAULT_INJECTION: forcing a failure. [ 726.898405] name failslab, interval 1, probability 0, space 0, times 0 [ 726.900806] CPU: 1 PID: 5753 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 726.902204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 726.903921] Call Trace: [ 726.904488] dump_stack+0x107/0x167 [ 726.905263] should_fail.cold+0x5/0xa [ 726.906064] ? kvmalloc_node+0x119/0x170 [ 726.906925] should_failslab+0x5/0x20 [ 726.907744] __kmalloc_node+0x76/0x4b0 [ 726.908572] kvmalloc_node+0x119/0x170 [ 726.909383] alloc_fdtable+0xd3/0x280 [ 726.910173] dup_fd+0x722/0xcb0 [ 726.910880] copy_process+0x1875/0x66f0 [ 726.911721] ? find_held_lock+0x2c/0x110 [ 726.912593] ? __cleanup_sighand+0xb0/0xb0 [ 726.913473] ? _copy_from_user+0xfb/0x1b0 [ 726.914360] kernel_clone+0xe7/0xa20 [ 726.915124] ? __lockdep_reset_lock+0x180/0x180 [ 726.916069] ? copy_init_mm+0x20/0x20 [ 726.916867] ? ksys_write+0x21a/0x260 [ 726.917635] ? lock_downgrade+0x6d0/0x6d0 [ 726.918477] __do_sys_clone3+0x1e5/0x320 [ 726.919294] ? __do_sys_clone+0x110/0x110 [ 726.920170] ? rcu_read_lock_any_held+0x75/0xa0 [ 726.921105] ? vfs_write+0x354/0xa30 [ 726.921871] ? fput_many+0x2f/0x1a0 [ 726.922607] ? ksys_write+0x1a9/0x260 [ 726.923384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 726.924453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.925499] ? trace_hardirqs_on+0x5b/0x180 [ 726.926377] do_syscall_64+0x33/0x40 [ 726.927130] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 726.928181] RIP: 0033:0x7f920ce96b19 [ 726.928933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.933298] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 726.935127] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 726.936851] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 726.938565] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.940264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 726.941977] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:32:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:32:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 727.023751] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 727.107616] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:32:53 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 14:32:53 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:32:53 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 727.174329] 9pnet: p9_fd_create_unix (5768): problem connecting socket: ./file0/../file0: -111 [ 727.272836] FAULT_INJECTION: forcing a failure. [ 727.272836] name failslab, interval 1, probability 0, space 0, times 0 [ 727.275224] CPU: 1 PID: 5774 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 727.276634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 727.278306] Call Trace: [ 727.278847] dump_stack+0x107/0x167 [ 727.279618] should_fail.cold+0x5/0xa [ 727.280407] ? create_object.isra.0+0x3a/0xa20 [ 727.281351] should_failslab+0x5/0x20 [ 727.282142] kmem_cache_alloc+0x5b/0x360 [ 727.282983] ? create_object.isra.0+0x3ad/0xa20 [ 727.283964] create_object.isra.0+0x3a/0xa20 [ 727.284888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 727.285950] __kmalloc_node+0x1ae/0x4b0 [ 727.286781] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 727.287840] memcg_slab_post_alloc_hook+0x1f9/0x3f0 [ 727.289047] ? trace_hardirqs_on+0x5b/0x180 [ 727.289963] kmem_cache_alloc_trace+0x169/0x360 [ 727.290935] ? rwlock_bug.part.0+0x90/0x90 [ 727.291787] alloc_fdtable+0x84/0x280 [ 727.292579] dup_fd+0x722/0xcb0 [ 727.293284] copy_process+0x1875/0x66f0 [ 727.294085] ? find_held_lock+0x2c/0x110 [ 727.294937] ? __cleanup_sighand+0xb0/0xb0 [ 727.295822] ? _copy_from_user+0xfb/0x1b0 [ 727.296677] kernel_clone+0xe7/0xa20 [ 727.297445] ? __lockdep_reset_lock+0x180/0x180 [ 727.298420] ? copy_init_mm+0x20/0x20 [ 727.299228] ? ksys_write+0x21a/0x260 [ 727.300034] ? lock_downgrade+0x6d0/0x6d0 [ 727.300882] __do_sys_clone3+0x1e5/0x320 [ 727.301726] ? __do_sys_clone+0x110/0x110 [ 727.302613] ? rcu_read_lock_any_held+0x75/0xa0 [ 727.303591] ? vfs_write+0x354/0xa30 [ 727.304356] ? fput_many+0x2f/0x1a0 [ 727.305102] ? ksys_write+0x1a9/0x260 [ 727.305887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 727.306954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 727.308019] ? trace_hardirqs_on+0x5b/0x180 [ 727.308905] do_syscall_64+0x33/0x40 [ 727.309668] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 727.310739] RIP: 0033:0x7f920ce96b19 [ 727.311521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 727.315365] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 727.316971] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 727.318455] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 727.319933] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.321380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 727.322850] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:33:10 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 743.359235] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:33:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:33:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:10 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:33:10 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 14:33:10 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:33:10 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 14:33:10 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 743.443761] 9pnet: p9_fd_create_unix (5797): problem connecting socket: ./file0/../file0: -111 [ 743.495671] FAULT_INJECTION: forcing a failure. [ 743.495671] name failslab, interval 1, probability 0, space 0, times 0 [ 743.498469] CPU: 1 PID: 5806 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 743.499993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 743.501816] Call Trace: [ 743.502416] dump_stack+0x107/0x167 [ 743.503221] should_fail.cold+0x5/0xa [ 743.504071] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 743.505241] should_failslab+0x5/0x20 [ 743.506085] __kmalloc_node+0x76/0x4b0 [ 743.506975] ? lock_downgrade+0x6d0/0x6d0 [ 743.507925] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 743.509051] memcg_slab_post_alloc_hook+0x1f9/0x3f0 [ 743.510159] ? trace_hardirqs_on+0x5b/0x180 [ 743.511123] __kmalloc_node+0x1c6/0x4b0 [ 743.512029] kvmalloc_node+0x119/0x170 [ 743.512880] alloc_fdtable+0xd3/0x280 [ 743.513711] dup_fd+0x722/0xcb0 [ 743.514445] copy_process+0x1875/0x66f0 [ 743.515308] ? find_held_lock+0x2c/0x110 [ 743.516218] ? __cleanup_sighand+0xb0/0xb0 [ 743.517148] ? _copy_from_user+0xfb/0x1b0 [ 743.518054] kernel_clone+0xe7/0xa20 [ 743.518860] ? __lockdep_reset_lock+0x180/0x180 [ 743.519886] ? copy_init_mm+0x20/0x20 [ 743.520729] ? ksys_write+0x21a/0x260 [ 743.521555] ? lock_downgrade+0x6d0/0x6d0 [ 743.522457] __do_sys_clone3+0x1e5/0x320 [ 743.523338] ? __do_sys_clone+0x110/0x110 [ 743.524266] ? rcu_read_lock_any_held+0x75/0xa0 [ 743.525269] ? vfs_write+0x354/0xa30 [ 743.526079] ? fput_many+0x2f/0x1a0 [ 743.526868] ? ksys_write+0x1a9/0x260 [ 743.527713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 743.528851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 743.529969] ? trace_hardirqs_on+0x5b/0x180 [ 743.530925] do_syscall_64+0x33/0x40 [ 743.531778] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 743.532885] RIP: 0033:0x7f920ce96b19 [ 743.533699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 743.537697] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 743.539360] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 743.540908] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 743.542441] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.544000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.545546] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:33:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) [ 743.578565] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 743.583458] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:33:10 executing program 7: clone3(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:10 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:33:10 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) write(r3, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:33:10 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 743.900601] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:33:10 executing program 7: clone3(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:33:10 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) [ 744.111648] 9pnet: p9_fd_create_unix (5824): problem connecting socket: ./file0/../file0: -111 [ 744.125063] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:33:10 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) [ 744.160406] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:33:10 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:33:11 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 744.254578] FAULT_INJECTION: forcing a failure. [ 744.254578] name failslab, interval 1, probability 0, space 0, times 0 [ 744.257555] CPU: 1 PID: 5834 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 744.258862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 744.260464] Call Trace: [ 744.260991] dump_stack+0x107/0x167 [ 744.261707] should_fail.cold+0x5/0xa [ 744.262462] ? create_object.isra.0+0x3a/0xa20 [ 744.263351] should_failslab+0x5/0x20 [ 744.264089] kmem_cache_alloc+0x5b/0x360 [ 744.264867] create_object.isra.0+0x3a/0xa20 [ 744.265709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 744.266682] __kmalloc_node+0x1ae/0x4b0 [ 744.267449] kvmalloc_node+0x119/0x170 [ 744.268228] alloc_fdtable+0x13f/0x280 [ 744.268975] dup_fd+0x722/0xcb0 [ 744.269626] copy_process+0x1875/0x66f0 [ 744.270393] ? find_held_lock+0x2c/0x110 [ 744.271193] ? __cleanup_sighand+0xb0/0xb0 [ 744.272024] ? _copy_from_user+0xfb/0x1b0 [ 744.272821] kernel_clone+0xe7/0xa20 [ 744.273532] ? __lockdep_reset_lock+0x180/0x180 [ 744.274420] ? copy_init_mm+0x20/0x20 [ 744.275161] ? ksys_write+0x21a/0x260 [ 744.275895] ? lock_downgrade+0x6d0/0x6d0 [ 744.276690] __do_sys_clone3+0x1e5/0x320 [ 744.277477] ? __do_sys_clone+0x110/0x110 [ 744.278291] ? rcu_read_lock_any_held+0x75/0xa0 [ 744.279196] ? vfs_write+0x354/0xa30 [ 744.279930] ? fput_many+0x2f/0x1a0 [ 744.280620] ? ksys_write+0x1a9/0x260 [ 744.281351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 744.282361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.283352] ? trace_hardirqs_on+0x5b/0x180 [ 744.284193] do_syscall_64+0x33/0x40 [ 744.284916] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 744.285912] RIP: 0033:0x7f920ce96b19 [ 744.286639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.290240] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 744.291691] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 744.293059] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 744.294422] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.295786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.297145] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 [ 744.459842] 9pnet: p9_fd_create_unix (5838): problem connecting socket: ./file0/../file0: -111 [ 758.647390] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 766.020264] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:33:32 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:33:32 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:33:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:33:32 executing program 7: clone3(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:33:32 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:33:32 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 14:33:32 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) [ 766.051876] FAULT_INJECTION: forcing a failure. [ 766.051876] name failslab, interval 1, probability 0, space 0, times 0 [ 766.054215] CPU: 0 PID: 5859 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 766.055579] 9pnet: p9_fd_create_unix (5858): problem connecting socket: ./file0/../file0: -111 [ 766.055603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 766.055618] Call Trace: [ 766.059677] dump_stack+0x107/0x167 [ 766.060440] should_fail.cold+0x5/0xa [ 766.061227] ? kvmalloc_node+0x119/0x170 [ 766.062060] should_failslab+0x5/0x20 [ 766.062844] __kmalloc_node+0x76/0x4b0 [ 766.063643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 766.064690] kvmalloc_node+0x119/0x170 [ 766.065487] alloc_fdtable+0x13f/0x280 [ 766.066282] dup_fd+0x722/0xcb0 [ 766.066973] copy_process+0x1875/0x66f0 [ 766.067792] ? find_held_lock+0x2c/0x110 [ 766.068670] ? __cleanup_sighand+0xb0/0xb0 [ 766.069559] ? _copy_from_user+0xfb/0x1b0 [ 766.070432] kernel_clone+0xe7/0xa20 [ 766.071197] ? __lockdep_reset_lock+0x180/0x180 [ 766.072159] ? copy_init_mm+0x20/0x20 [ 766.072967] ? ksys_write+0x21a/0x260 [ 766.073762] ? lock_downgrade+0x6d0/0x6d0 [ 766.074625] __do_sys_clone3+0x1e5/0x320 [ 766.075472] ? __do_sys_clone+0x110/0x110 [ 766.076361] ? rcu_read_lock_any_held+0x75/0xa0 [ 766.077309] ? vfs_write+0x354/0xa30 [ 766.078084] ? fput_many+0x2f/0x1a0 [ 766.078830] ? ksys_write+0x1a9/0x260 [ 766.079621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 766.080704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 766.081754] ? trace_hardirqs_on+0x5b/0x180 [ 766.082641] do_syscall_64+0x33/0x40 [ 766.083406] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 766.084463] RIP: 0033:0x7f920ce96b19 [ 766.085229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.089001] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 766.090548] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 766.092004] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 766.093455] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.094921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.096376] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:33:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 766.150273] 9pnet: p9_fd_create_unix (5867): problem connecting socket: ./file0/../file0: -111 14:33:32 executing program 7: clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) [ 766.215690] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 766.321557] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 779.767438] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:33:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:33:53 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:33:53 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) 14:33:53 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:33:53 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) 14:33:53 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:33:53 executing program 7: clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:53 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) [ 787.210770] FAULT_INJECTION: forcing a failure. [ 787.210770] name failslab, interval 1, probability 0, space 0, times 0 [ 787.213123] CPU: 0 PID: 5896 Comm: syz-executor.5 Not tainted 5.10.159 #1 [ 787.214485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 787.216194] Call Trace: [ 787.216739] dump_stack+0x107/0x167 [ 787.217489] should_fail.cold+0x5/0xa [ 787.218273] ? create_object.isra.0+0x3a/0xa20 [ 787.219224] should_failslab+0x5/0x20 [ 787.220001] kmem_cache_alloc+0x5b/0x360 [ 787.220853] create_object.isra.0+0x3a/0xa20 [ 787.221765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 787.221940] 9pnet: p9_fd_create_unix (5898): problem connecting socket: ./file0/../file0: -111 [ 787.222804] kmem_cache_alloc+0x159/0x360 [ 787.222830] copy_fs_struct+0x45/0x340 [ 787.222853] copy_process+0x4536/0x66f0 [ 787.222880] ? find_held_lock+0x2c/0x110 [ 787.228091] ? __cleanup_sighand+0xb0/0xb0 [ 787.228974] ? _copy_from_user+0xfb/0x1b0 [ 787.229828] kernel_clone+0xe7/0xa20 [ 787.230589] ? __lockdep_reset_lock+0x180/0x180 [ 787.231541] ? copy_init_mm+0x20/0x20 [ 787.232357] ? ksys_write+0x21a/0x260 [ 787.233137] ? lock_downgrade+0x6d0/0x6d0 [ 787.234006] __do_sys_clone3+0x1e5/0x320 [ 787.234852] ? __do_sys_clone+0x110/0x110 [ 787.235720] ? rcu_read_lock_any_held+0x75/0xa0 [ 787.236697] ? vfs_write+0x354/0xa30 [ 787.237470] ? fput_many+0x2f/0x1a0 [ 787.238213] ? ksys_write+0x1a9/0x260 [ 787.239011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 787.240101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 787.241157] ? trace_hardirqs_on+0x5b/0x180 [ 787.242057] do_syscall_64+0x33/0x40 [ 787.242827] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 787.243881] RIP: 0033:0x7f920ce96b19 [ 787.244664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 787.248444] RSP: 002b:00007f920a40c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 787.250013] RAX: ffffffffffffffda RBX: 00007f920cfa9f60 RCX: 00007f920ce96b19 [ 787.251494] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 787.252966] RBP: 00007f920a40c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.254420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 787.255874] R13: 00007ffc8000f0ff R14: 00007f920a40c300 R15: 0000000000022000 14:33:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 787.794859] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) [ 787.835936] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:33:54 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:33:54 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 787.909925] 9pnet: p9_fd_create_unix (5916): problem connecting socket: ./file0/../file0: -111 14:33:54 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) 14:33:54 executing program 7: clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:54 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0xdf4, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:33:54 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) 14:33:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:33:54 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) [ 788.120873] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870971 (only 16 groups) 14:33:54 executing program 5: clone3(&(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 788.203280] 9pnet: p9_fd_create_unix (5934): problem connecting socket: ./file0/../file0: -111 14:33:54 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:55 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 788.264362] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:33:55 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:33:55 executing program 5: clone3(&(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:33:55 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:33:55 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:55 executing program 5: clone3(&(0x7f0000000500)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:33:55 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:33:55 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:33:55 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) [ 788.752745] 9pnet: p9_fd_create_unix (5960): problem connecting socket: ./file0/../file0: -111 14:33:55 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r2, r1, 0x0, 0x9bbb) [ 788.869811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 801.613860] kmemleak: 55 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:34:15 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:34:15 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 14:34:16 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:34:16 executing program 5: clone3(&(0x7f0000000500)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:34:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:34:16 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:34:16 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:34:16 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) [ 809.295856] 9pnet: p9_fd_create_unix (5991): problem connecting socket: ./file0/../file0: -111 [ 809.380458] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:34:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:34:16 executing program 5: clone3(&(0x7f0000000500)={0x3f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 809.538659] 9pnet: p9_fd_create_unix (6019): problem connecting socket: ./file0/../file0: -111 14:34:16 executing program 5: clone3(&(0x7f0000000500)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:34:16 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:34:16 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:34:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:34:32 executing program 5: clone3(&(0x7f0000000500)={0x20010, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:34:32 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:34:32 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) dup3(r3, r3, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:34:32 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x2000003b}) 14:34:32 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:34:32 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:34:32 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) 14:34:32 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x2000003b}) [ 826.201691] 9pnet: p9_fd_create_unix (6049): problem connecting socket: ./file0/../file0: -111 14:34:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:34:33 executing program 5: clone3(&(0x7f0000000500)={0x20200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 826.276864] 9pnet: p9_fd_create_unix (6061): problem connecting socket: ./file0/../file0: -111 [ 826.284757] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:34:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x0, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:34:33 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x2000003b}) [ 826.433686] 9pnet: p9_fd_create_unix (6072): problem connecting socket: ./file0/../file0: -111 14:34:45 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:34:45 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:34:45 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) dup3(r3, r3, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:34:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x0, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:34:45 executing program 5: clone3(&(0x7f0000000500)={0x80000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:34:45 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 14:34:45 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 14:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) [ 838.942310] 9pnet: p9_fd_create_unix (6097): problem connecting socket: ./file0/../file0: -111 [ 839.029448] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 852.302962] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:35:06 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:35:06 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 14:35:06 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) dup3(r3, r3, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:35:06 executing program 6: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:35:06 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:35:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x0, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:06 executing program 5: clone3(&(0x7f0000000500)={0x101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:35:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 860.002191] 9pnet: p9_fd_create_unix (6115): problem connecting socket: ./file0/../file0: -111 14:35:06 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 14:35:06 executing program 5: clone3(&(0x7f0000000500)={0xf0ff1f, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 860.121884] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:35:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:35:06 executing program 5: clone3(&(0x7f0000000500)={0x1000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:35:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x0, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:07 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 860.264399] 9pnet: p9_fd_create_unix (6149): problem connecting socket: ./file0/../file0: -111 14:35:07 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 14:35:07 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 14:35:07 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:35:07 executing program 5: clone3(&(0x7f0000000500)={0x8000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 860.464789] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 14:35:19 executing program 6: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:35:19 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x0, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:19 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:35:19 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:35:19 executing program 5: clone3(&(0x7f0000000500)={0x10000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:35:19 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:35:19 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 872.674906] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 14:35:19 executing program 5: clone3(&(0x7f0000000500)={0x11000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 872.729776] 9pnet: p9_fd_create_unix (6178): problem connecting socket: ./file0/../file0: -111 14:35:19 executing program 7: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) [ 872.836723] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:35:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x0, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:19 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 872.881570] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 872.938134] 9pnet: p9_fd_create_unix (6204): problem connecting socket: ./file0/../file0: -111 14:35:19 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x0, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:19 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) 14:35:19 executing program 6: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r7}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 14:35:19 executing program 5: clone3(&(0x7f0000000500)={0x1ffff000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 873.096391] 9pnet: p9_fd_create_unix (6212): problem connecting socket: ./file0/../file0: -111 14:35:19 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:35:19 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:35:19 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:35:20 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x0, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 873.270199] 9pnet: p9_fd_create_unix (6228): problem connecting socket: ./file0/../file0: -111 [ 873.371975] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:35:33 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:35:33 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:35:33 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:33 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:35:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x0, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:33 executing program 5: clone3(&(0x7f0000000500)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:35:33 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:33 executing program 6: r0 = creat(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 887.130106] 9pnet: p9_fd_create_unix (6250): problem connecting socket: ./file0/../file0: -111 14:35:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 887.257575] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:35:34 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 887.276054] 9pnet: p9_fd_create_unix (6267): problem connecting socket: ./file0/../file0: -111 [ 899.720183] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:35:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:53 executing program 6: r0 = creat(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:35:53 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:35:53 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:35:53 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:53 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:53 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:35:53 executing program 5: clone3(&(0x7f0000000500)={0x3f000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 906.454515] 9pnet: p9_fd_create_unix (6278): problem connecting socket: ./file0/../file0: -111 14:35:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:53 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 906.669077] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:35:53 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:53 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) [ 906.740091] 9pnet: p9_fd_create_unix (6306): problem connecting socket: ./file0/../file0: -111 14:35:53 executing program 6: r0 = creat(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:35:53 executing program 5: clone3(&(0x7f0000000500)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:35:53 executing program 7: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:35:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:53 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 906.945352] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 906.946380] 9pnet: p9_fd_create_unix (6326): problem connecting socket: ./file0/../file0: -111 14:35:53 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:53 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:35:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:53 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:35:53 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180), 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 907.173782] 9pnet: p9_fd_create_unix (6339): problem connecting socket: ./file0/../file0: -111 [ 907.211702] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:35:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x0, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:35:54 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180), 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 907.316052] 9pnet: p9_fd_create_unix (6345): problem connecting socket: ./file0/../file0: -111 14:35:54 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:35:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 907.460610] 9pnet: p9_fd_create_unix (6350): problem connecting socket: ./file0/../file0: -111 [ 907.491490] 9pnet: p9_fd_create_unix (6356): problem connecting socket: ./file0/../file0: -111 14:35:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 907.697394] 9pnet: p9_fd_create_unix (6359): problem connecting socket: ./file0/../file0: -111 [ 920.499414] kmemleak: 40 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:36:14 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:36:14 executing program 5: clone3(&(0x7f0000000500)={0x100000800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:14 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:36:14 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180), 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:36:14 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:36:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:36:14 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:36:14 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) socket$inet(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) [ 928.217430] 9pnet: p9_fd_create_unix (6381): problem connecting socket: ./file0/../file0: -111 [ 928.264630] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 941.237043] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:36:36 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:36:36 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:36:36 executing program 5: clone3(&(0x7f0000000500)={0x1b0c41f000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:36 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r2 = dup3(r1, r1, 0x0) openat(r2, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:36:36 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:36:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:36:36 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:36:36 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) [ 949.803812] 9pnet: p9_fd_create_unix (6402): problem connecting socket: ./file0/../file0: -111 14:36:36 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:36:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 949.902808] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:36:36 executing program 0: socket$inet(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:36:36 executing program 5: clone3(&(0x7f0000000500)={0x10000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 949.938902] 9pnet: p9_fd_create_unix (6424): problem connecting socket: ./file0/../file0: -111 14:36:36 executing program 5: clone3(&(0x7f0000000500)={0x2a3cb4dd2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:36 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:36:36 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:36:36 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 964.510516] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:36:59 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:36:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:36:59 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r2 = dup3(r1, r1, 0x0) openat(r2, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:36:59 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:36:59 executing program 5: clone3(&(0x7f0000000500)={0x553a271d8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:59 executing program 0: socket$inet(0x2, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:36:59 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:36:59 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 972.373357] 9pnet: p9_fd_create_unix (6454): problem connecting socket: ./file0/../file0: -111 14:36:59 executing program 5: clone3(&(0x7f0000000500)={0x2001000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 972.432964] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:36:59 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:36:59 executing program 5: clone3(&(0x7f0000000500)={0x2020000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:59 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:36:59 executing program 5: clone3(&(0x7f0000000500)={0x8000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:36:59 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:36:59 executing program 1: socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r2 = dup3(r1, r1, 0x0) openat(r2, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 972.723569] 9pnet: p9_fd_create_unix (6480): problem connecting socket: ./file0/../file0: -111 14:36:59 executing program 5: clone3(&(0x7f0000000500)={0x8000001000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 987.390276] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:37:22 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:37:22 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:37:22 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:37:22 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:37:22 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:37:22 executing program 5: clone3(&(0x7f0000000500)={0x10100000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:37:22 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:37:22 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 996.000334] 9pnet: p9_fd_create_unix (6504): problem connecting socket: ./file0/../file0: -111 [ 996.046124] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:37:22 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:37:22 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:37:22 executing program 5: clone3(&(0x7f0000000500)={0x20ddb43c2a0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:37:22 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 996.194762] 9pnet: p9_fd_create_unix (6525): problem connecting socket: ./file0/../file0: -111 14:37:23 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:37:23 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:37:23 executing program 5: clone3(&(0x7f0000000500)={0x801d273a550000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 996.309303] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1008.069867] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:37:42 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) socket$inet(0x2, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 14:37:42 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:37:42 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:37:42 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:37:42 executing program 5: clone3(&(0x7f0000000500)={0xf0410c1b000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:37:42 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:37:42 executing program 7: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:37:42 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1015.628853] 9pnet: p9_fd_create_unix (6560): problem connecting socket: ./file0/../file0: -111 14:37:42 executing program 5: clone3(&(0x7f0000000500)={0xf0ff1f00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1015.768799] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:37:42 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) socket$inet(0x2, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:37:42 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1015.875134] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 14:37:42 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:37:42 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:37:42 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:37:42 executing program 5: clone3(&(0x7f0000000500)={0x100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1016.072090] 9pnet: p9_fd_create_unix (6587): problem connecting socket: ./file0/../file0: -111 14:37:42 executing program 4: socket$inet(0x2, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) [ 1030.571221] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:38:05 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:38:05 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:05 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:38:05 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:38:05 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:05 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:05 executing program 5: clone3(&(0x7f0000000500)={0x800000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:05 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1039.025488] 9pnet: p9_fd_create_unix (6609): problem connecting socket: ./file0/../file0: -111 14:38:05 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:38:05 executing program 5: clone3(&(0x7f0000000500)={0x1100000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1039.237785] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:38:06 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:38:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1039.357962] 9pnet: p9_fd_create_unix (6639): problem connecting socket: ./file0/../file0: -111 14:38:06 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:06 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:06 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:38:06 executing program 5: clone3(&(0x7f0000000500)={0x2000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:06 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:38:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 1039.506746] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:38:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:06 executing program 5: clone3(&(0x7f0000000500)={0x3f00000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 1039.607444] 9pnet: p9_fd_create_unix (6661): problem connecting socket: ./file0/../file0: -111 14:38:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:06 executing program 5: clone3(&(0x7f0000000500)={0x4000000000000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:06 executing program 1: socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 1039.686309] 9pnet: p9_fd_create_unix (6670): problem connecting socket: ./file0/../file0: -111 14:38:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 1039.791116] 9pnet: p9_fd_create_unix (6675): problem connecting socket: ./file0/../file0: -111 [ 1052.618678] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:38:27 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:38:27 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:38:27 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:38:27 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:27 executing program 0: socket$inet(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:38:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:38:27 executing program 5: clone3(&(0x7f0000000500)={0xffffffff00000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1060.599556] 9pnet: p9_fd_create_unix (6703): problem connecting socket: ./file0/../file0: -111 14:38:27 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:38:27 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:27 executing program 0: socket$inet(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) [ 1060.736604] 9pnet: p9_fd_create_unix (6717): problem connecting socket: ./file0/../file0: -111 14:38:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:27 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:27 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:38:27 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1060.889251] 9pnet: p9_fd_create_unix (6728): problem connecting socket: ./file0/../file0: -111 [ 1073.100650] kmemleak: 24 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:38:49 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:49 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:38:49 executing program 1: socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r3 = dup3(r2, r2, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:38:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:49 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:49 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x0, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:38:49 executing program 0: socket$inet(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:38:49 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1082.854386] 9pnet: p9_fd_create_unix (6743): problem connecting socket: ./file0/../file0: -111 14:38:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:38:49 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x0, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:38:49 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:38:49 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 14:38:49 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) [ 1083.097219] 9pnet: p9_fd_create_unix (6771): problem connecting socket: ./file0/../file0: -111 14:38:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1083.361372] 9pnet: p9_fd_create_unix (6784): problem connecting socket: ./file0/../file0: -111 [ 1096.166720] kmemleak: 46 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:39:11 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:39:11 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:39:11 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 14:39:11 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:39:11 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:39:11 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x0, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:39:11 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:39:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1104.668463] 9pnet: p9_fd_create_unix (6808): problem connecting socket: ./file0/../file0: -111 [ 1104.714363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 14:39:11 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:39:11 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:39:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:39:11 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(0xffffffffffffffff, r0, 0x0, 0x9bbb) 14:39:11 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1104.950964] 9pnet: p9_fd_create_unix (6830): problem connecting socket: ./file0/../file0: -111 [ 1117.562488] kmemleak: 14 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:39:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:39:32 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 14:39:32 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:39:32 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:39:32 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(0xffffffffffffffff, r0, 0x0, 0x9bbb) 14:39:32 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:39:32 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:39:32 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1125.999394] 9pnet: p9_fd_create_unix (6848): problem connecting socket: ./file0/../file0: -111 [ 1126.015685] 9pnet: p9_fd_create_unix (6856): problem connecting socket: ./file0/../file0: -111 14:39:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:39:32 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1126.068148] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1126.122919] 9pnet: p9_fd_create_unix (6869): problem connecting socket: ./file0/../file0: -111 14:39:32 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:39:32 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(0xffffffffffffffff, r0, 0x0, 0x9bbb) 14:39:33 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:39:33 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 14:39:33 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:39:33 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:39:33 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:39:33 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x20200}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1126.514970] 9pnet: p9_fd_create_unix (6891): problem connecting socket: ./file0/../file0: -111 14:39:33 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 14:39:33 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r0, 0xffffffffffffffff, 0x0, 0x9bbb) 14:39:33 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1126.783852] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1139.441682] kmemleak: 17 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:39:54 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x80000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:39:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:39:54 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:39:54 executing program 7: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:39:54 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r0, 0xffffffffffffffff, 0x0, 0x9bbb) 14:39:54 executing program 4: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 14:39:54 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:39:54 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 1147.795768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1147.799733] 9pnet: p9_fd_create_unix (6934): problem connecting socket: ./file0/../file0: -111 [ 1147.856863] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 1160.380750] kmemleak: 25 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:40:14 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:40:14 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:40:14 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:40:14 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:40:14 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r0, 0xffffffffffffffff, 0x0, 0x9bbb) 14:40:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:40:14 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:40:14 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) [ 1167.882332] 9pnet: p9_fd_create_unix (6953): problem connecting socket: ./file0/../file0: -111 14:40:14 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x0) [ 1167.947549] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1167.972718] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 14:40:14 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0xf0ff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:40:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1168.185605] 9pnet: p9_fd_create_unix (6985): problem connecting socket: ./file0/../file0: -111 [ 1181.410468] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:40:36 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:40:36 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x0) 14:40:36 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:40:36 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:40:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:40:36 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:40:36 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:40:36 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1189.742899] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1189.752753] 9pnet: p9_fd_create_unix (7008): problem connecting socket: ./file0/../file0: -111 14:40:36 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x0) 14:40:36 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1189.844500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 14:40:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:40:36 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 14:40:36 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1189.969485] 9pnet: p9_fd_create_unix (7021): problem connecting socket: ./file0/../file0: -111 14:40:36 executing program 0: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)) 14:40:36 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:40:36 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:40:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1190.164278] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 14:40:36 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1190.336540] 9pnet: p9_fd_create_unix (7042): problem connecting socket: ./file0/../file0: -111 [ 1204.021425] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1213.531993] 9pnet: p9_fd_create_unix (7057): problem connecting socket: ./file0/../file0: -111 14:41:00 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x1ffff000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:41:00 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:41:00 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:41:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:00 executing program 4: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:41:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x0, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:00 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:41:00 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') [ 1213.548686] 9pnet: p9_fd_create_unix (7060): problem connecting socket: ./file0/../file0: -111 14:41:00 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:00 executing program 4: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:41:00 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:41:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:00 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:41:00 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:41:00 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:41:00 executing program 4: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) [ 1213.876413] 9pnet: p9_fd_create_unix (7077): problem connecting socket: ./file0/../file0: -111 14:41:00 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1228.437632] kmemleak: 26 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:41:23 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:41:23 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:41:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:23 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:23 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:41:23 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:23 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:41:23 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) [ 1237.100539] 9pnet: p9_fd_create_unix (7103): problem connecting socket: ./file0/../file0: -111 14:41:23 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:23 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) [ 1237.268070] 9pnet: p9_fd_create_unix (7125): problem connecting socket: ./file0/../file0: -111 14:41:24 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:24 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) [ 1237.374329] 9pnet: p9_fd_create_unix (7130): problem connecting socket: ./file0/../file0: -111 14:41:24 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:24 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) [ 1237.537753] 9pnet: p9_fd_create_unix (7137): problem connecting socket: ./file0/../file0: -111 14:41:24 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:24 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:41:24 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:41:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 14:41:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:24 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) [ 1237.930653] 9pnet: p9_fd_create_unix (7151): problem connecting socket: ./file0/../file0: -111 14:41:24 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:41:24 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) 14:41:24 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1238.497571] 9pnet: p9_fd_create_unix (7166): problem connecting socket: ./file0/../file0: -111 [ 1251.823686] kmemleak: 60 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:41:47 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:47 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:41:47 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:41:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:41:47 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 14:41:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:41:47 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) 14:41:47 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1260.546145] 9pnet: p9_fd_create_unix (7176): problem connecting socket: ./file0/../file0: -111 [ 1260.584728] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (11 blocks) [ 1267.849900] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1276.639124] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:42:11 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) 14:42:11 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:42:11 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:42:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:42:11 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) 14:42:11 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) [ 1285.233090] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (11 blocks) 14:42:11 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) 14:42:11 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) [ 1285.271669] 9pnet: p9_fd_create_unix (7214): problem connecting socket: ./file0/../file0: -111 14:42:12 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20200, 0x0, 0x0}, 0x58) 14:42:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:42:12 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:42:12 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x80000, 0x0, 0x0}, 0x58) 14:42:12 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:42:12 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) 14:42:12 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x101000, 0x0, 0x0}, 0x58) 14:42:12 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xf0ff1f, 0x0, 0x0}, 0x58) 14:42:12 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 14:42:12 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) [ 1286.126278] 9pnet: p9_fd_create_unix (7248): problem connecting socket: ./file0/../file0: -111 [ 1298.636428] kmemleak: 54 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:42:32 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:42:32 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:42:32 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) 14:42:32 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:42:32 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:42:32 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 14:42:32 executing program 7: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) (fail_nth: 1) 14:42:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1305.527679] FAULT_INJECTION: forcing a failure. [ 1305.527679] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.530070] CPU: 0 PID: 7273 Comm: syz-executor.7 Not tainted 5.10.159 #1 [ 1305.531481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.533535] Call Trace: [ 1305.534100] dump_stack+0x107/0x167 [ 1305.535000] should_fail.cold+0x5/0xa [ 1305.535805] ? alloc_pipe_info+0x105/0x580 [ 1305.536858] should_failslab+0x5/0x20 [ 1305.537650] kmem_cache_alloc_trace+0x55/0x360 [ 1305.538780] alloc_pipe_info+0x105/0x580 [ 1305.539635] ? __lock_acquire+0xbb1/0x5b00 [ 1305.540685] splice_direct_to_actor+0x774/0x980 [ 1305.541643] ? _cond_resched+0x12/0x80 [ 1305.542605] ? pipe_to_sendpage+0x380/0x380 [ 1305.543690] ? selinux_file_permission+0x36/0x510 [ 1305.544877] ? do_splice_to+0x160/0x160 [ 1305.545700] ? security_file_permission+0x24e/0x570 [ 1305.546946] do_splice_direct+0x1c4/0x290 [ 1305.547811] ? splice_direct_to_actor+0x980/0x980 [ 1305.548997] ? selinux_file_permission+0x36/0x510 [ 1305.549986] ? security_file_permission+0x24e/0x570 [ 1305.551063] do_sendfile+0x553/0x1040 [ 1305.551852] ? do_pwritev+0x270/0x270 [ 1305.552634] ? wait_for_completion+0x270/0x270 [ 1305.553565] ? rcu_read_lock_any_held+0x75/0xa0 [ 1305.554506] ? vfs_write+0x354/0xa30 [ 1305.555278] __x64_sys_sendfile64+0x1d1/0x210 [ 1305.556198] ? __ia32_sys_sendfile+0x220/0x220 [ 1305.557133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1305.558201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1305.559261] do_syscall_64+0x33/0x40 [ 1305.560016] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1305.561050] RIP: 0033:0x7f311e778b19 [ 1305.561803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.565544] RSP: 002b:00007f311bcee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1305.567095] RAX: ffffffffffffffda RBX: 00007f311e88bf60 RCX: 00007f311e778b19 [ 1305.568534] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1305.569981] RBP: 00007f311bcee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1305.571434] R10: 0000000000009bbb R11: 0000000000000246 R12: 0000000000000001 [ 1305.572875] R13: 00007fff9b88f95f R14: 00007f311bcee300 R15: 0000000000022000 [ 1305.589067] 9pnet: p9_fd_create_unix (7276): problem connecting socket: ./file0/../file0: -111 [ 1305.675135] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (11 blocks) [ 1321.547407] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 14:43:01 executing program 7: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) (fail_nth: 2) 14:43:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:43:01 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:43:01 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:43:01 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) [ 1335.086910] 9pnet: p9_fd_create_unix (7291): problem connecting socket: ./file0/../file0: -111 14:43:01 executing program 3: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (fail_nth: 1) 14:43:01 executing program 4: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (fail_nth: 1) 14:43:01 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) [ 1335.120187] FAULT_INJECTION: forcing a failure. [ 1335.120187] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.122545] CPU: 1 PID: 7303 Comm: syz-executor.7 Not tainted 5.10.159 #1 [ 1335.123952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.125652] Call Trace: [ 1335.126191] dump_stack+0x107/0x167 [ 1335.126933] should_fail.cold+0x5/0xa [ 1335.127732] ? create_object.isra.0+0x3a/0xa20 [ 1335.128659] should_failslab+0x5/0x20 [ 1335.129426] kmem_cache_alloc+0x5b/0x360 [ 1335.130258] create_object.isra.0+0x3a/0xa20 [ 1335.131160] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1335.132206] kmem_cache_alloc_trace+0x151/0x360 [ 1335.133150] alloc_pipe_info+0x105/0x580 [ 1335.133974] ? __lock_acquire+0xbb1/0x5b00 [ 1335.134310] FAULT_INJECTION: forcing a failure. [ 1335.134310] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.134818] splice_direct_to_actor+0x774/0x980 [ 1335.134833] ? _cond_resched+0x12/0x80 [ 1335.134848] ? pipe_to_sendpage+0x380/0x380 [ 1335.134867] ? selinux_file_permission+0x36/0x510 [ 1335.134882] ? do_splice_to+0x160/0x160 [ 1335.134899] ? security_file_permission+0x24e/0x570 [ 1335.134919] do_splice_direct+0x1c4/0x290 [ 1335.134934] ? splice_direct_to_actor+0x980/0x980 [ 1335.134951] ? selinux_file_permission+0x36/0x510 [ 1335.134970] ? security_file_permission+0x24e/0x570 [ 1335.134993] do_sendfile+0x553/0x1040 [ 1335.135014] ? do_pwritev+0x270/0x270 [ 1335.135030] ? wait_for_completion+0x270/0x270 [ 1335.135048] ? rcu_read_lock_any_held+0x75/0xa0 [ 1335.135063] ? vfs_write+0x354/0xa30 [ 1335.135083] __x64_sys_sendfile64+0x1d1/0x210 [ 1335.135102] ? __ia32_sys_sendfile+0x220/0x220 [ 1335.135121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1335.135139] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.135157] do_syscall_64+0x33/0x40 [ 1335.135174] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1335.135186] RIP: 0033:0x7f311e778b19 [ 1335.135203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.135212] RSP: 002b:00007f311bcee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1335.135231] RAX: ffffffffffffffda RBX: 00007f311e88bf60 RCX: 00007f311e778b19 [ 1335.135240] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1335.135250] RBP: 00007f311bcee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.135259] R10: 0000000000009bbb R11: 0000000000000246 R12: 0000000000000001 [ 1335.135269] R13: 00007fff9b88f95f R14: 00007f311bcee300 R15: 0000000000022000 [ 1335.170013] CPU: 0 PID: 7307 Comm: syz-executor.3 Not tainted 5.10.159 #1 [ 1335.171375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.173046] Call Trace: [ 1335.173575] dump_stack+0x107/0x167 [ 1335.174312] should_fail.cold+0x5/0xa [ 1335.175082] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1335.176164] ? tty_buffer_alloc+0x243/0x2b0 [ 1335.177036] should_failslab+0x5/0x20 [ 1335.177801] __kmalloc+0x72/0x3f0 [ 1335.178503] tty_buffer_alloc+0x243/0x2b0 [ 1335.179345] __tty_buffer_request_room+0x156/0x2a0 [ 1335.180347] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1335.181466] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1335.182662] pty_write+0xe6/0x110 [ 1335.183370] tty_send_xchar+0x29b/0x3c0 [ 1335.184179] ? tty_write_message+0x140/0x140 [ 1335.185080] n_tty_ioctl_helper+0x191/0x3a0 [ 1335.185951] n_tty_ioctl+0x56/0x370 [ 1335.186685] tty_ioctl+0x912/0x1840 [ 1335.187433] ? n_tty_write_wakeup+0x40/0x40 [ 1335.188305] ? tty_fasync+0x390/0x390 [ 1335.189072] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1335.190231] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1335.191269] ? do_vfs_ioctl+0x283/0x10d0 [ 1335.192094] ? selinux_inode_getsecctx+0x90/0x90 [ 1335.193045] ? generic_block_fiemap+0x60/0x60 [ 1335.193946] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1335.194924] ? selinux_file_ioctl+0xb1/0x260 [ 1335.195817] ? tty_fasync+0x390/0x390 [ 1335.196588] __x64_sys_ioctl+0x19a/0x210 [ 1335.197405] do_syscall_64+0x33/0x40 [ 1335.198154] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1335.199182] RIP: 0033:0x7fd8b97deb19 [ 1335.199944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.203679] RSP: 002b:00007fd8b6d33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.205209] RAX: ffffffffffffffda RBX: 00007fd8b98f2020 RCX: 00007fd8b97deb19 [ 1335.206649] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1335.208096] RBP: 00007fd8b6d331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.209535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.210966] R13: 00007ffeb5468fef R14: 00007fd8b6d33300 R15: 0000000000022000 [ 1335.212447] [ 1335.212456] ====================================================== [ 1335.212464] WARNING: possible circular locking dependency detected [ 1335.212469] 5.10.159 #1 Not tainted [ 1335.212476] ------------------------------------------------------ [ 1335.212482] syz-executor.3/7307 is trying to acquire lock: [ 1335.212488] ffffffff84f0c440 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x2ca/0x4d0 [ 1335.212510] [ 1335.212515] but task is already holding lock: [ 1335.212520] ffff88800f702158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 1335.212542] [ 1335.212548] which lock already depends on the new lock. [ 1335.212550] [ 1335.212553] [ 1335.212560] the existing dependency chain (in reverse order) is: [ 1335.212562] [ 1335.212565] -> #2 (&port->lock){-.-.}-{2:2}: [ 1335.212586] _raw_spin_lock_irqsave+0x36/0x60 [ 1335.212591] tty_port_tty_get+0x1f/0x100 [ 1335.212596] tty_port_default_wakeup+0x11/0x40 [ 1335.212602] serial8250_tx_chars+0x51f/0xb00 [ 1335.212608] serial8250_handle_irq.part.0+0x43e/0x530 [ 1335.212614] serial8250_default_handle_irq+0xb8/0x230 [ 1335.212620] serial8250_interrupt+0xf4/0x1b0 [ 1335.212626] __handle_irq_event_percpu+0x2ef/0x820 [ 1335.212631] handle_irq_event+0xff/0x280 [ 1335.212636] handle_edge_irq+0x249/0xd00 [ 1335.212642] asm_call_irq_on_stack+0x12/0x20 [ 1335.212647] common_interrupt+0xdd/0x190 [ 1335.212652] asm_common_interrupt+0x1e/0x40 [ 1335.212657] default_idle+0xe/0x20 [ 1335.212662] default_idle_call+0x8b/0xd0 [ 1335.212667] do_idle+0x3ad/0x520 [ 1335.212672] cpu_startup_entry+0x14/0x20 [ 1335.212678] secondary_startup_64_no_verify+0xc2/0xcb [ 1335.212681] [ 1335.212684] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1335.212704] _raw_spin_lock_irqsave+0x36/0x60 [ 1335.212710] serial8250_console_write+0x9f5/0xc60 [ 1335.212715] console_unlock+0x82a/0xb40 [ 1335.212721] register_console+0x53d/0x800 [ 1335.212726] univ8250_console_init+0x3a/0x4a [ 1335.212731] console_init+0x361/0x4fa [ 1335.212736] start_kernel+0x2e1/0x48e [ 1335.212742] secondary_startup_64_no_verify+0xc2/0xcb [ 1335.212745] [ 1335.212748] -> #0 (console_owner){-.-.}-{0:0}: [ 1335.212768] __lock_acquire+0x29e7/0x5b00 [ 1335.212773] lock_acquire+0x197/0x490 [ 1335.212778] vprintk_emit+0x307/0x4d0 [ 1335.212783] vprintk_func+0x8b/0x140 [ 1335.212787] printk+0xba/0xf1 [ 1335.212792] should_fail+0x47a/0x5a0 [ 1335.212797] should_failslab+0x5/0x20 [ 1335.212802] __kmalloc+0x72/0x3f0 [ 1335.212807] tty_buffer_alloc+0x243/0x2b0 [ 1335.212813] __tty_buffer_request_room+0x156/0x2a0 [ 1335.212820] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1335.212827] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1335.212831] pty_write+0xe6/0x110 [ 1335.212836] tty_send_xchar+0x29b/0x3c0 [ 1335.212842] n_tty_ioctl_helper+0x191/0x3a0 [ 1335.212847] n_tty_ioctl+0x56/0x370 [ 1335.212851] tty_ioctl+0x912/0x1840 [ 1335.212857] __x64_sys_ioctl+0x19a/0x210 [ 1335.212862] do_syscall_64+0x33/0x40 [ 1335.212868] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1335.212870] [ 1335.212876] other info that might help us debug this: [ 1335.212878] [ 1335.212882] Chain exists of: [ 1335.212885] console_owner --> &port_lock_key --> &port->lock [ 1335.212910] [ 1335.212915] Possible unsafe locking scenario: [ 1335.212918] [ 1335.212923] CPU0 CPU1 [ 1335.212928] ---- ---- [ 1335.212932] lock(&port->lock); [ 1335.212944] lock(&port_lock_key); [ 1335.212957] lock(&port->lock); [ 1335.212968] lock(console_owner); [ 1335.212978] [ 1335.212982] *** DEADLOCK *** [ 1335.212984] [ 1335.212989] 4 locks held by syz-executor.3/7307: [ 1335.212993] #0: ffff888044eb5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x90 [ 1335.213018] #1: ffff888044eb5130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_send_xchar+0x1e2/0x3c0 [ 1335.213043] #2: ffff888044eb52e8 (&tty->termios_rwsem){++++}-{3:3}, at: tty_send_xchar+0x22f/0x3c0 [ 1335.213068] #3: ffff88800f702158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x2b/0x160 [ 1335.213093] [ 1335.213097] stack backtrace: [ 1335.213105] CPU: 0 PID: 7307 Comm: syz-executor.3 Not tainted 5.10.159 #1 [ 1335.213113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.213117] Call Trace: [ 1335.213121] dump_stack+0x107/0x167 [ 1335.213126] check_noncircular+0x263/0x2e0 [ 1335.213132] ? stack_trace_consume_entry+0x160/0x160 [ 1335.213137] ? print_circular_bug+0x470/0x470 [ 1335.213142] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 1335.213147] __lock_acquire+0x29e7/0x5b00 [ 1335.213153] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1335.213158] ? __lockdep_reset_lock+0x180/0x180 [ 1335.213162] lock_acquire+0x197/0x490 [ 1335.213167] ? vprintk_emit+0x2ca/0x4d0 [ 1335.213172] ? lock_release+0x6b0/0x6b0 [ 1335.213177] ? lock_downgrade+0x6d0/0x6d0 [ 1335.213182] ? do_raw_spin_lock+0x121/0x260 [ 1335.213187] ? rwlock_bug.part.0+0x90/0x90 [ 1335.213191] vprintk_emit+0x307/0x4d0 [ 1335.213196] ? vprintk_emit+0x2ca/0x4d0 [ 1335.213200] vprintk_func+0x8b/0x140 [ 1335.213204] printk+0xba/0xf1 [ 1335.213209] ? record_print_text.cold+0x16/0x16 [ 1335.213215] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1335.213220] should_fail+0x47a/0x5a0 [ 1335.213226] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1335.213231] ? tty_buffer_alloc+0x243/0x2b0 [ 1335.213235] should_failslab+0x5/0x20 [ 1335.213239] __kmalloc+0x72/0x3f0 [ 1335.213244] tty_buffer_alloc+0x243/0x2b0 [ 1335.213250] __tty_buffer_request_room+0x156/0x2a0 [ 1335.213256] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1335.213262] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1335.213266] pty_write+0xe6/0x110 [ 1335.213271] tty_send_xchar+0x29b/0x3c0 [ 1335.213276] ? tty_write_message+0x140/0x140 [ 1335.213281] n_tty_ioctl_helper+0x191/0x3a0 [ 1335.213285] n_tty_ioctl+0x56/0x370 [ 1335.213290] tty_ioctl+0x912/0x1840 [ 1335.213295] ? n_tty_write_wakeup+0x40/0x40 [ 1335.213299] ? tty_fasync+0x390/0x390 [ 1335.213306] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1335.213311] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1335.213316] ? do_vfs_ioctl+0x283/0x10d0 [ 1335.213321] ? selinux_inode_getsecctx+0x90/0x90 [ 1335.213327] ? generic_block_fiemap+0x60/0x60 [ 1335.213332] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1335.213337] ? selinux_file_ioctl+0xb1/0x260 [ 1335.213342] ? tty_fasync+0x390/0x390 [ 1335.213346] __x64_sys_ioctl+0x19a/0x210 [ 1335.213351] do_syscall_64+0x33/0x40 [ 1335.213357] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1335.213361] RIP: 0033:0x7fd8b97deb19 [ 1335.213379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.213385] RSP: 002b:00007fd8b6d33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.213398] RAX: ffffffffffffffda RBX: 00007fd8b98f2020 RCX: 00007fd8b97deb19 [ 1335.213405] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1335.213413] RBP: 00007fd8b6d331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.213420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.213428] R13: 00007ffeb5468fef R14: 00007fd8b6d33300 R15: 0000000000022000 [ 1335.363592] FAULT_INJECTION: forcing a failure. [ 1335.363592] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.365833] CPU: 0 PID: 7314 Comm: syz-executor.4 Not tainted 5.10.159 #1 [ 1335.367204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.368880] Call Trace: [ 1335.369417] dump_stack+0x107/0x167 [ 1335.370152] should_fail.cold+0x5/0xa [ 1335.370922] ? lock_release+0x4df/0x6b0 [ 1335.371732] ? tty_buffer_alloc+0x243/0x2b0 [ 1335.372613] should_failslab+0x5/0x20 [ 1335.373380] __kmalloc+0x72/0x3f0 [ 1335.374082] ? rcu_read_lock_sched_held+0xd/0x80 [ 1335.375041] tty_buffer_alloc+0x243/0x2b0 [ 1335.375895] __tty_buffer_request_room+0x156/0x2a0 [ 1335.376892] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1335.378011] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1335.379204] pty_write+0xe6/0x110 [ 1335.379912] tty_send_xchar+0x29b/0x3c0 [ 1335.380705] ? tty_write_message+0x140/0x140 [ 1335.381603] n_tty_ioctl_helper+0x191/0x3a0 [ 1335.382474] n_tty_ioctl+0x56/0x370 [ 1335.383214] tty_ioctl+0x912/0x1840 [ 1335.383972] ? n_tty_write_wakeup+0x40/0x40 [ 1335.384850] ? tty_fasync+0x390/0x390 [ 1335.385617] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1335.386765] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1335.387803] ? do_vfs_ioctl+0x283/0x10d0 [ 1335.388615] ? selinux_inode_getsecctx+0x90/0x90 [ 1335.389560] ? generic_block_fiemap+0x60/0x60 [ 1335.390459] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1335.391458] ? selinux_file_ioctl+0xb1/0x260 [ 1335.392345] ? tty_fasync+0x390/0x390 [ 1335.393109] __x64_sys_ioctl+0x19a/0x210 14:43:01 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) 14:43:02 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:43:02 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) 14:43:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) [ 1335.393921] do_syscall_64+0x33/0x40 [ 1335.394854] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1335.395893] RIP: 0033:0x7fd340507b19 [ 1335.396639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.400339] RSP: 002b:00007fd33da5c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.401864] RAX: ffffffffffffffda RBX: 00007fd34061b020 RCX: 00007fd340507b19 [ 1335.402710] 9pnet: p9_fd_create_unix (7318): problem connecting socket: ./file0/../file0: -111 [ 1335.403292] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1335.403302] RBP: 00007fd33da5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.403311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.403320] R13: 00007ffe224ae48f R14: 00007fd33da5c300 R15: 0000000000022000 14:43:02 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:43:02 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1ffff000, 0x0, 0x0}, 0x58) 14:43:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:43:02 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) [ 1335.807896] 9pnet: p9_fd_create_unix (7333): problem connecting socket: ./file0/../file0: -111 14:43:11 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) 14:43:11 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:43:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:43:11 executing program 3: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (fail_nth: 2) 14:43:11 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ff1c2e2f661c69b0ad6e65"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x6800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 14:43:11 executing program 7: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:43:11 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:43:11 executing program 4: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (fail_nth: 2) 14:43:11 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) [ 1344.568789] 9pnet: p9_fd_create_unix (7354): problem connecting socket: ./file0/../file0: -111 [ 1344.582855] FAULT_INJECTION: forcing a failure. [ 1344.582855] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.584058] CPU: 0 PID: 7358 Comm: syz-executor.3 Not tainted 5.10.159 #1 [ 1344.584783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.585664] Call Trace: [ 1344.585949] dump_stack+0x107/0x167 [ 1344.586327] should_fail.cold+0x5/0xa [ 1344.586732] ? create_object.isra.0+0x3a/0xa20 [ 1344.587212] should_failslab+0x5/0x20 [ 1344.587627] kmem_cache_alloc+0x5b/0x360 [ 1344.588053] ? kernel_init_free_pages+0xc2/0x1b0 [ 1344.588565] create_object.isra.0+0x3a/0xa20 [ 1344.589031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1344.589570] __kmalloc+0x16e/0x3f0 [ 1344.589949] tty_buffer_alloc+0x243/0x2b0 [ 1344.590396] __tty_buffer_request_room+0x156/0x2a0 [ 1344.590914] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1344.591494] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1344.592129] pty_write+0xe6/0x110 [ 1344.592501] tty_send_xchar+0x29b/0x3c0 [ 1344.592926] ? tty_write_message+0x140/0x140 [ 1344.593395] n_tty_ioctl_helper+0x191/0x3a0 [ 1344.593857] n_tty_ioctl+0x56/0x370 [ 1344.594250] tty_ioctl+0x912/0x1840 [ 1344.594637] ? n_tty_write_wakeup+0x40/0x40 [ 1344.595096] ? tty_fasync+0x390/0x390 [ 1344.595511] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1344.596146] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1344.596698] ? do_vfs_ioctl+0x283/0x10d0 [ 1344.597137] ? selinux_inode_getsecctx+0x90/0x90 [ 1344.597650] ? generic_block_fiemap+0x60/0x60 [ 1344.598132] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.598661] ? selinux_file_ioctl+0xb1/0x260 [ 1344.599132] ? tty_fasync+0x390/0x390 [ 1344.599549] __x64_sys_ioctl+0x19a/0x210 [ 1344.599985] do_syscall_64+0x33/0x40 [ 1344.600385] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1344.600938] RIP: 0033:0x7fd8b97deb19 [ 1344.601338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.603320] RSP: 002b:00007fd8b6d33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.604152] RAX: ffffffffffffffda RBX: 00007fd8b98f2020 RCX: 00007fd8b97deb19 [ 1344.604929] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1344.605708] RBP: 00007fd8b6d331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.606482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.607252] R13: 00007ffeb5468fef R14: 00007fd8b6d33300 R15: 0000000000022000 [ 1344.611136] FAULT_INJECTION: forcing a failure. [ 1344.611136] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.612348] CPU: 0 PID: 7361 Comm: syz-executor.4 Not tainted 5.10.159 #1 [ 1344.613086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.613984] Call Trace: [ 1344.614267] dump_stack+0x107/0x167 [ 1344.614659] should_fail.cold+0x5/0xa [ 1344.615070] ? create_object.isra.0+0x3a/0xa20 [ 1344.615577] should_failslab+0x5/0x20 [ 1344.615993] kmem_cache_alloc+0x5b/0x360 [ 1344.616430] ? kernel_init_free_pages+0xc2/0x1b0 [ 1344.616943] create_object.isra.0+0x3a/0xa20 [ 1344.617427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1344.617983] __kmalloc+0x16e/0x3f0 [ 1344.618375] tty_buffer_alloc+0x243/0x2b0 [ 1344.618828] __tty_buffer_request_room+0x156/0x2a0 [ 1344.619366] tty_insert_flip_string_fixed_flag+0x91/0x250 [ 1344.619975] tty_insert_flip_string_and_push_buffer+0x3e/0x160 [ 1344.620617] pty_write+0xe6/0x110 [ 1344.620996] tty_send_xchar+0x29b/0x3c0 [ 1344.621427] ? tty_write_message+0x140/0x140 [ 1344.621905] n_tty_ioctl_helper+0x191/0x3a0 [ 1344.622377] n_tty_ioctl+0x56/0x370 [ 1344.622770] tty_ioctl+0x912/0x1840 [ 1344.623161] ? n_tty_write_wakeup+0x40/0x40 [ 1344.623631] ? tty_fasync+0x390/0x390 [ 1344.624044] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1344.624670] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1344.625231] ? do_vfs_ioctl+0x283/0x10d0 [ 1344.625673] ? selinux_inode_getsecctx+0x90/0x90 [ 1344.626187] ? generic_block_fiemap+0x60/0x60 [ 1344.626675] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1344.627204] ? selinux_file_ioctl+0xb1/0x260 [ 1344.627705] ? tty_fasync+0x390/0x390 [ 1344.628119] __x64_sys_ioctl+0x19a/0x210 [ 1344.628561] do_syscall_64+0x33/0x40 [ 1344.628963] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1344.629518] RIP: 0033:0x7fd340507b19 [ 1344.629927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1344.631921] RSP: 002b:00007fd33da5c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.632739] RAX: ffffffffffffffda RBX: 00007fd34061b020 RCX: 00007fd340507b19 [ 1344.633515] RDX: 0000000000000002 RSI: 000000000000540a RDI: 0000000000000003 [ 1344.634291] RBP: 00007fd33da5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.635076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.635861] R13: 00007ffe224ae48f R14: 00007fd33da5c300 R15: 0000000000022000 14:43:11 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 14:43:11 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x2) mount$bind(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) mount$9p_unix(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=unix,', {[{@fscache}, {@version_9p2000}, {@cache_mmap}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'system_u:object_r:kmsg_device_t:s0\x00'}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x0, 0x20, 0x1, 0x0, 0x8, 0x40008, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x3, 0x6b0}, 0x40029, 0x6, 0x2b0, 0x9, 0x3, 0x8d8a, 0x3, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) 14:43:11 executing program 7: socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = signalfd(r1, &(0x7f00000001c0)={[0xd80401b000000000]}, 0x8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x5}, 0x4) socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x9bbb) 14:43:11 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x100000800, 0x0, 0x0}, 0x58) 14:43:11 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) [ 1344.746542] 9pnet: p9_fd_create_unix (7373): problem connecting socket: ./file0/../file0: -111 14:43:11 executing program 4: socket$inet(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (fail_nth: 3) 14:43:11 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x4) 14:43:11 executing program 5: clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x1b0c41f000, 0x0, 0x0}, 0x58) 14:43:11 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000012900)) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0xc142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x20) r4 = dup3(r3, r3, 0x0) openat(r4, &(0x7f0000000180)='./file1\x00', 0x80880, 0x1) write(r3, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') 14:43:11 executing program 3: socket$inet(0x2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (fail_nth: 3) [ 1344.838905] FAULT_INJECTION: forcing a failure. [ 1344.838905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.841538] CPU: 0 PID: 7384 Comm: syz-executor.4 Not tainted 5.10.159 #1 [ 1344.842944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.844768] Call Trace: [ 1344.845350] dump_stack+0x107/0x167 [ 1344.846146] should_fail.cold+0x5/0xa [ 1344.846976] _copy_to_user+0x2e/0x180 [ 1344.847779] simple_read_from_buffer+0xcc/0x160 [ 1344.848796] proc_fail_nth_read+0x198/0x230 [ 1344.849736] ? proc_sessionid_read+0x230/0x230 [ 1344.850731] ? security_file_permission+0x24e/0x570 [ 1344.851844] ? perf_trace_initcall_start+0x101/0x380 [ 1344.852891] ? proc_sessionid_read+0x230/0x230 [ 1344.853892] vfs_read+0x228/0x580 [ 1344.854657] ksys_read+0x12d/0x260 [ 1344.855398] ? vfs_write+0xa30/0xa30 [ 1344.856204] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1344.857382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.858470] do_syscall_64+0x33/0x40 [ 1344.859259] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1344.860400] RIP: 0033:0x7fd3404ba69c [ 1344.861219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1344.865183] RSP: 002b:00007fd33da5c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1344.866798] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd3404ba69c [ 1344.868347] RDX: 000000000000000f RSI: 00007fd33da5c1e0 RDI: 0000000000000004 [ 1344.869875] RBP: 00007fd33da5c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.871445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.873025] R13: 00007ffe224ae48f R14: 00007fd33da5c300 R15: 0000000000022000 [ 1344.907077] FAULT_INJECTION: forcing a failure. [ 1344.907077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.909698] CPU: 1 PID: 7389 Comm: syz-executor.3 Not tainted 5.10.159 #1 [ 1344.911178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1344.912998] Call Trace: [ 1344.913576] dump_stack+0x107/0x167 [ 1344.914417] should_fail.cold+0x5/0xa [ 1344.915248] _copy_to_user+0x2e/0x180 [ 1344.916097] simple_read_from_buffer+0xcc/0x160 [ 1344.917103] proc_fail_nth_read+0x198/0x230 [ 1344.918036] ? proc_sessionid_read+0x230/0x230 [ 1344.919006] ? security_file_permission+0x24e/0x570 [ 1344.920083] ? perf_trace_initcall_start+0x101/0x380 [ 1344.921159] ? proc_sessionid_read+0x230/0x230 [ 1344.922131] vfs_read+0x228/0x580 [ 1344.922885] ksys_read+0x12d/0x260 [ 1344.923669] ? vfs_write+0xa30/0xa30 [ 1344.924477] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1344.925629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1344.926754] do_syscall_64+0x33/0x40 [ 1344.927572] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1344.928666] RIP: 0033:0x7fd8b979169c [ 1344.929465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1344.933485] RSP: 002b:00007fd8b6d33170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1344.935128] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8b979169c [ 1344.936676] RDX: 000000000000000f RSI: 00007fd8b6d331e0 RDI: 0000000000000004 [ 1344.938216] RBP: 00007fd8b6d331d0 R08: 0000000000000000 R09: 0000000000000000 [ 1344.939772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.941310] R13: 00007ffeb5468fef R14: 00007fd8b6d33300 R15: 0000000000022000 VM DIAGNOSIS: 14:43:02 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8229e5f1 RDI=ffffffff8791bfe0 RBP=ffffffff8791bfa0 RSP=ffff88806ce09c90 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000035 R13=0000000000000035 R14=ffffffff8791bfa0 R15=dffffc0000000000 RIP=ffffffff8229e648 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd8b6d33700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8b6d32f78 CR3=00000000475f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8114d568 RDX=0000000000000000 RSI=ffff888008e61980 RDI=0000000000000005 RBP=ffff888041d97d24 RSP=ffff888041d97b18 R8 =0000000000000001 R9 =ffffffff84e0a083 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000040000005 R14=ffff888015b91980 R15=0000000040000000 RIP=ffffffff81402ee0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556d16400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559cdf7225b8 CR3=0000000041d8e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000