Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:50071' (ECDSA) to the list of known hosts. 2022/12/26 18:18:47 fuzzer started 2022/12/26 18:18:47 dialing manager at localhost:36179 syzkaller login: [ 27.172450] cgroup: Unknown subsys name 'net' [ 27.174019] cgroup: Unknown subsys name 'net_prio' [ 27.175452] cgroup: Unknown subsys name 'devices' [ 27.176918] cgroup: Unknown subsys name 'blkio' [ 27.231987] cgroup: Unknown subsys name 'hugetlb' [ 27.233445] cgroup: Unknown subsys name 'rlimit' 2022/12/26 18:19:00 syscalls: 2215 2022/12/26 18:19:00 code coverage: enabled 2022/12/26 18:19:00 comparison tracing: enabled 2022/12/26 18:19:00 extra coverage: enabled 2022/12/26 18:19:00 setuid sandbox: enabled 2022/12/26 18:19:00 namespace sandbox: enabled 2022/12/26 18:19:00 Android sandbox: enabled 2022/12/26 18:19:00 fault injection: enabled 2022/12/26 18:19:00 leak checking: enabled 2022/12/26 18:19:00 net packet injection: enabled 2022/12/26 18:19:00 net device setup: enabled 2022/12/26 18:19:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/12/26 18:19:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/12/26 18:19:00 USB emulation: enabled 2022/12/26 18:19:00 hci packet injection: enabled 2022/12/26 18:19:00 wifi device emulation: enabled 2022/12/26 18:19:00 802.15.4 emulation: enabled 2022/12/26 18:19:00 fetching corpus: 50, signal 26200/28043 (executing program) 2022/12/26 18:19:00 fetching corpus: 100, signal 37439/41001 (executing program) 2022/12/26 18:19:00 fetching corpus: 150, signal 47627/52843 (executing program) 2022/12/26 18:19:01 fetching corpus: 200, signal 58971/65634 (executing program) 2022/12/26 18:19:01 fetching corpus: 250, signal 66711/74803 (executing program) 2022/12/26 18:19:01 fetching corpus: 300, signal 72666/82155 (executing program) 2022/12/26 18:19:01 fetching corpus: 350, signal 77236/88132 (executing program) 2022/12/26 18:19:01 fetching corpus: 400, signal 81702/93928 (executing program) 2022/12/26 18:19:01 fetching corpus: 450, signal 86935/100420 (executing program) 2022/12/26 18:19:01 fetching corpus: 500, signal 91767/106444 (executing program) 2022/12/26 18:19:01 fetching corpus: 550, signal 94182/110215 (executing program) 2022/12/26 18:19:02 fetching corpus: 600, signal 96842/114144 (executing program) 2022/12/26 18:19:02 fetching corpus: 650, signal 98993/117564 (executing program) 2022/12/26 18:19:02 fetching corpus: 700, signal 102184/121951 (executing program) 2022/12/26 18:19:02 fetching corpus: 750, signal 105366/126248 (executing program) 2022/12/26 18:19:02 fetching corpus: 800, signal 108269/130314 (executing program) 2022/12/26 18:19:02 fetching corpus: 850, signal 111748/134808 (executing program) 2022/12/26 18:19:02 fetching corpus: 900, signal 115915/139905 (executing program) 2022/12/26 18:19:02 fetching corpus: 950, signal 118520/143535 (executing program) 2022/12/26 18:19:02 fetching corpus: 1000, signal 120402/146496 (executing program) 2022/12/26 18:19:02 fetching corpus: 1050, signal 122371/149533 (executing program) 2022/12/26 18:19:03 fetching corpus: 1100, signal 123696/151989 (executing program) 2022/12/26 18:19:03 fetching corpus: 1150, signal 125198/154552 (executing program) 2022/12/26 18:19:03 fetching corpus: 1200, signal 126631/157065 (executing program) 2022/12/26 18:19:03 fetching corpus: 1250, signal 127895/159430 (executing program) 2022/12/26 18:19:03 fetching corpus: 1300, signal 130883/163269 (executing program) 2022/12/26 18:19:03 fetching corpus: 1350, signal 133050/166349 (executing program) 2022/12/26 18:19:03 fetching corpus: 1400, signal 135420/169560 (executing program) 2022/12/26 18:19:03 fetching corpus: 1450, signal 137388/172411 (executing program) 2022/12/26 18:19:03 fetching corpus: 1500, signal 138969/174933 (executing program) 2022/12/26 18:19:03 fetching corpus: 1550, signal 140417/177323 (executing program) 2022/12/26 18:19:03 fetching corpus: 1600, signal 141866/179708 (executing program) 2022/12/26 18:19:04 fetching corpus: 1650, signal 144154/182758 (executing program) 2022/12/26 18:19:04 fetching corpus: 1700, signal 145215/184757 (executing program) 2022/12/26 18:19:04 fetching corpus: 1750, signal 146693/187093 (executing program) 2022/12/26 18:19:04 fetching corpus: 1800, signal 148001/189320 (executing program) 2022/12/26 18:19:04 fetching corpus: 1850, signal 149278/191462 (executing program) 2022/12/26 18:19:04 fetching corpus: 1900, signal 150625/193659 (executing program) 2022/12/26 18:19:04 fetching corpus: 1950, signal 152408/196143 (executing program) 2022/12/26 18:19:04 fetching corpus: 2000, signal 153580/198145 (executing program) 2022/12/26 18:19:04 fetching corpus: 2050, signal 154831/200221 (executing program) 2022/12/26 18:19:05 fetching corpus: 2100, signal 157240/203174 (executing program) 2022/12/26 18:19:05 fetching corpus: 2150, signal 158320/205110 (executing program) 2022/12/26 18:19:05 fetching corpus: 2200, signal 159645/207180 (executing program) 2022/12/26 18:19:05 fetching corpus: 2250, signal 161010/209231 (executing program) 2022/12/26 18:19:05 fetching corpus: 2300, signal 162621/211466 (executing program) 2022/12/26 18:19:05 fetching corpus: 2350, signal 163476/213180 (executing program) 2022/12/26 18:19:05 fetching corpus: 2400, signal 164315/214834 (executing program) 2022/12/26 18:19:05 fetching corpus: 2450, signal 165303/216632 (executing program) 2022/12/26 18:19:05 fetching corpus: 2500, signal 166357/218455 (executing program) 2022/12/26 18:19:05 fetching corpus: 2550, signal 167237/220064 (executing program) 2022/12/26 18:19:05 fetching corpus: 2600, signal 168203/221776 (executing program) 2022/12/26 18:19:06 fetching corpus: 2650, signal 169474/223716 (executing program) 2022/12/26 18:19:06 fetching corpus: 2700, signal 170544/225434 (executing program) 2022/12/26 18:19:06 fetching corpus: 2750, signal 171568/227122 (executing program) 2022/12/26 18:19:06 fetching corpus: 2800, signal 172894/229030 (executing program) 2022/12/26 18:19:06 fetching corpus: 2850, signal 173816/230684 (executing program) 2022/12/26 18:19:06 fetching corpus: 2900, signal 174512/232151 (executing program) 2022/12/26 18:19:06 fetching corpus: 2950, signal 175276/233667 (executing program) 2022/12/26 18:19:06 fetching corpus: 3000, signal 176214/235260 (executing program) 2022/12/26 18:19:06 fetching corpus: 3050, signal 177608/237126 (executing program) 2022/12/26 18:19:06 fetching corpus: 3100, signal 178398/238573 (executing program) 2022/12/26 18:19:07 fetching corpus: 3150, signal 179263/240100 (executing program) 2022/12/26 18:19:07 fetching corpus: 3200, signal 179868/241455 (executing program) 2022/12/26 18:19:07 fetching corpus: 3250, signal 180809/242975 (executing program) 2022/12/26 18:19:07 fetching corpus: 3300, signal 182018/244637 (executing program) 2022/12/26 18:19:07 fetching corpus: 3350, signal 182889/246140 (executing program) 2022/12/26 18:19:07 fetching corpus: 3400, signal 183596/247534 (executing program) 2022/12/26 18:19:07 fetching corpus: 3450, signal 184233/248822 (executing program) 2022/12/26 18:19:07 fetching corpus: 3500, signal 185118/250268 (executing program) 2022/12/26 18:19:08 fetching corpus: 3550, signal 186308/251906 (executing program) 2022/12/26 18:19:08 fetching corpus: 3600, signal 186999/253248 (executing program) 2022/12/26 18:19:08 fetching corpus: 3650, signal 187698/254538 (executing program) 2022/12/26 18:19:08 fetching corpus: 3700, signal 188483/255858 (executing program) 2022/12/26 18:19:08 fetching corpus: 3750, signal 189433/257333 (executing program) 2022/12/26 18:19:08 fetching corpus: 3800, signal 190413/258796 (executing program) 2022/12/26 18:19:08 fetching corpus: 3850, signal 191096/260133 (executing program) 2022/12/26 18:19:08 fetching corpus: 3900, signal 191697/261341 (executing program) 2022/12/26 18:19:08 fetching corpus: 3950, signal 192626/262768 (executing program) 2022/12/26 18:19:09 fetching corpus: 4000, signal 193313/263988 (executing program) 2022/12/26 18:19:09 fetching corpus: 4050, signal 193856/265177 (executing program) 2022/12/26 18:19:09 fetching corpus: 4100, signal 194515/266407 (executing program) 2022/12/26 18:19:09 fetching corpus: 4150, signal 195229/267671 (executing program) 2022/12/26 18:19:09 fetching corpus: 4200, signal 195942/268934 (executing program) 2022/12/26 18:19:09 fetching corpus: 4250, signal 196727/270228 (executing program) 2022/12/26 18:19:09 fetching corpus: 4300, signal 197437/271459 (executing program) 2022/12/26 18:19:09 fetching corpus: 4350, signal 198678/272941 (executing program) 2022/12/26 18:19:09 fetching corpus: 4400, signal 199710/274326 (executing program) 2022/12/26 18:19:09 fetching corpus: 4450, signal 200514/275565 (executing program) 2022/12/26 18:19:10 fetching corpus: 4500, signal 201469/276859 (executing program) 2022/12/26 18:19:10 fetching corpus: 4550, signal 202218/278058 (executing program) 2022/12/26 18:19:10 fetching corpus: 4600, signal 202813/279163 (executing program) 2022/12/26 18:19:10 fetching corpus: 4650, signal 203373/280213 (executing program) 2022/12/26 18:19:10 fetching corpus: 4700, signal 203931/281263 (executing program) 2022/12/26 18:19:10 fetching corpus: 4750, signal 204446/282298 (executing program) 2022/12/26 18:19:10 fetching corpus: 4800, signal 205133/283507 (executing program) 2022/12/26 18:19:10 fetching corpus: 4850, signal 205629/284525 (executing program) 2022/12/26 18:19:10 fetching corpus: 4900, signal 206276/285655 (executing program) 2022/12/26 18:19:10 fetching corpus: 4950, signal 206893/286738 (executing program) 2022/12/26 18:19:11 fetching corpus: 5000, signal 207481/287807 (executing program) 2022/12/26 18:19:11 fetching corpus: 5050, signal 208122/288881 (executing program) 2022/12/26 18:19:11 fetching corpus: 5100, signal 208652/289924 (executing program) 2022/12/26 18:19:11 fetching corpus: 5150, signal 209273/290957 (executing program) 2022/12/26 18:19:11 fetching corpus: 5200, signal 209867/291967 (executing program) 2022/12/26 18:19:11 fetching corpus: 5250, signal 210647/293071 (executing program) 2022/12/26 18:19:11 fetching corpus: 5300, signal 211505/294207 (executing program) 2022/12/26 18:19:11 fetching corpus: 5350, signal 212100/295212 (executing program) 2022/12/26 18:19:11 fetching corpus: 5400, signal 212867/296270 (executing program) 2022/12/26 18:19:12 fetching corpus: 5450, signal 213424/297256 (executing program) 2022/12/26 18:19:12 fetching corpus: 5500, signal 214135/298263 (executing program) 2022/12/26 18:19:12 fetching corpus: 5550, signal 214916/299319 (executing program) 2022/12/26 18:19:12 fetching corpus: 5600, signal 215486/300321 (executing program) 2022/12/26 18:19:12 fetching corpus: 5650, signal 216015/301279 (executing program) 2022/12/26 18:19:12 fetching corpus: 5700, signal 216613/302215 (executing program) 2022/12/26 18:19:12 fetching corpus: 5750, signal 217072/303099 (executing program) 2022/12/26 18:19:12 fetching corpus: 5800, signal 217463/303926 (executing program) 2022/12/26 18:19:13 fetching corpus: 5850, signal 218107/304869 (executing program) 2022/12/26 18:19:13 fetching corpus: 5900, signal 218722/305817 (executing program) 2022/12/26 18:19:13 fetching corpus: 5950, signal 219135/306669 (executing program) 2022/12/26 18:19:13 fetching corpus: 6000, signal 219491/307491 (executing program) 2022/12/26 18:19:13 fetching corpus: 6050, signal 220104/308446 (executing program) 2022/12/26 18:19:13 fetching corpus: 6100, signal 220505/309281 (executing program) 2022/12/26 18:19:13 fetching corpus: 6150, signal 220937/310148 (executing program) 2022/12/26 18:19:13 fetching corpus: 6200, signal 221294/310965 (executing program) 2022/12/26 18:19:13 fetching corpus: 6250, signal 221741/311809 (executing program) 2022/12/26 18:19:14 fetching corpus: 6300, signal 222219/312709 (executing program) 2022/12/26 18:19:14 fetching corpus: 6350, signal 222725/313581 (executing program) 2022/12/26 18:19:14 fetching corpus: 6400, signal 223122/314376 (executing program) 2022/12/26 18:19:14 fetching corpus: 6450, signal 223530/315174 (executing program) 2022/12/26 18:19:14 fetching corpus: 6500, signal 224113/316036 (executing program) 2022/12/26 18:19:14 fetching corpus: 6550, signal 224535/316832 (executing program) 2022/12/26 18:19:14 fetching corpus: 6600, signal 225068/317685 (executing program) 2022/12/26 18:19:14 fetching corpus: 6650, signal 225350/318449 (executing program) 2022/12/26 18:19:14 fetching corpus: 6700, signal 225756/319228 (executing program) 2022/12/26 18:19:15 fetching corpus: 6750, signal 226238/319984 (executing program) 2022/12/26 18:19:15 fetching corpus: 6800, signal 226578/320730 (executing program) 2022/12/26 18:19:15 fetching corpus: 6850, signal 227530/321663 (executing program) 2022/12/26 18:19:15 fetching corpus: 6900, signal 228032/322516 (executing program) 2022/12/26 18:19:15 fetching corpus: 6950, signal 228428/323256 (executing program) 2022/12/26 18:19:15 fetching corpus: 7000, signal 228831/323986 (executing program) 2022/12/26 18:19:15 fetching corpus: 7050, signal 229317/324753 (executing program) 2022/12/26 18:19:15 fetching corpus: 7100, signal 229645/325470 (executing program) 2022/12/26 18:19:16 fetching corpus: 7150, signal 230140/326246 (executing program) 2022/12/26 18:19:16 fetching corpus: 7200, signal 230504/326993 (executing program) 2022/12/26 18:19:16 fetching corpus: 7250, signal 230947/327715 (executing program) 2022/12/26 18:19:16 fetching corpus: 7300, signal 231316/328487 (executing program) 2022/12/26 18:19:16 fetching corpus: 7350, signal 231846/329212 (executing program) 2022/12/26 18:19:16 fetching corpus: 7400, signal 232338/329929 (executing program) 2022/12/26 18:19:16 fetching corpus: 7450, signal 232812/330655 (executing program) 2022/12/26 18:19:16 fetching corpus: 7500, signal 233292/331357 (executing program) 2022/12/26 18:19:16 fetching corpus: 7550, signal 233638/332041 (executing program) 2022/12/26 18:19:17 fetching corpus: 7600, signal 234032/332762 (executing program) 2022/12/26 18:19:17 fetching corpus: 7650, signal 234324/333455 (executing program) 2022/12/26 18:19:17 fetching corpus: 7700, signal 234829/334159 (executing program) 2022/12/26 18:19:17 fetching corpus: 7750, signal 235427/334903 (executing program) 2022/12/26 18:19:17 fetching corpus: 7800, signal 235871/335598 (executing program) 2022/12/26 18:19:17 fetching corpus: 7850, signal 236143/336261 (executing program) 2022/12/26 18:19:17 fetching corpus: 7900, signal 236690/336943 (executing program) 2022/12/26 18:19:17 fetching corpus: 7950, signal 237012/337601 (executing program) 2022/12/26 18:19:17 fetching corpus: 8000, signal 237327/338224 (executing program) 2022/12/26 18:19:17 fetching corpus: 8050, signal 237765/338893 (executing program) 2022/12/26 18:19:18 fetching corpus: 8100, signal 238164/339577 (executing program) 2022/12/26 18:19:18 fetching corpus: 8150, signal 238724/340221 (executing program) 2022/12/26 18:19:18 fetching corpus: 8200, signal 239091/340831 (executing program) 2022/12/26 18:19:18 fetching corpus: 8250, signal 239414/341493 (executing program) 2022/12/26 18:19:18 fetching corpus: 8300, signal 239971/342136 (executing program) 2022/12/26 18:19:18 fetching corpus: 8350, signal 240274/342754 (executing program) 2022/12/26 18:19:18 fetching corpus: 8400, signal 240721/343423 (executing program) 2022/12/26 18:19:18 fetching corpus: 8450, signal 241130/344027 (executing program) 2022/12/26 18:19:18 fetching corpus: 8500, signal 241422/344605 (executing program) 2022/12/26 18:19:19 fetching corpus: 8550, signal 241893/345250 (executing program) 2022/12/26 18:19:19 fetching corpus: 8600, signal 242120/345806 (executing program) 2022/12/26 18:19:19 fetching corpus: 8650, signal 242493/346424 (executing program) 2022/12/26 18:19:19 fetching corpus: 8700, signal 242896/346584 (executing program) 2022/12/26 18:19:19 fetching corpus: 8750, signal 243289/346584 (executing program) 2022/12/26 18:19:19 fetching corpus: 8800, signal 243568/346584 (executing program) 2022/12/26 18:19:19 fetching corpus: 8850, signal 243922/346584 (executing program) 2022/12/26 18:19:19 fetching corpus: 8900, signal 244268/346584 (executing program) 2022/12/26 18:19:19 fetching corpus: 8950, signal 244567/346584 (executing program) 2022/12/26 18:19:19 fetching corpus: 9000, signal 244886/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9050, signal 245270/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9100, signal 245560/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9150, signal 245898/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9200, signal 246214/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9250, signal 246520/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9300, signal 246923/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9350, signal 247342/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9400, signal 247741/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9450, signal 248100/346584 (executing program) 2022/12/26 18:19:20 fetching corpus: 9500, signal 248437/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9550, signal 248697/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9600, signal 249007/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9650, signal 249237/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9700, signal 249568/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9750, signal 249810/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9800, signal 250040/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9850, signal 250479/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9900, signal 250815/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 9950, signal 251181/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 10000, signal 251458/346584 (executing program) 2022/12/26 18:19:21 fetching corpus: 10050, signal 251736/346584 (executing program) 2022/12/26 18:19:22 fetching corpus: 10100, signal 251971/346584 (executing program) 2022/12/26 18:19:22 fetching corpus: 10150, signal 252421/346584 (executing program) 2022/12/26 18:19:22 fetching corpus: 10200, signal 252776/346585 (executing program) 2022/12/26 18:19:22 fetching corpus: 10250, signal 253150/346585 (executing program) 2022/12/26 18:19:22 fetching corpus: 10300, signal 253455/346585 (executing program) 2022/12/26 18:19:22 fetching corpus: 10350, signal 253759/346585 (executing program) 2022/12/26 18:19:22 fetching corpus: 10400, signal 254117/346585 (executing program) 2022/12/26 18:19:22 fetching corpus: 10450, signal 254440/346585 (executing program) 2022/12/26 18:19:22 fetching corpus: 10500, signal 254724/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10550, signal 255250/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10600, signal 255543/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10650, signal 255820/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10700, signal 256091/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10750, signal 256355/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10800, signal 256572/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10850, signal 256915/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10900, signal 257199/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 10950, signal 257488/346585 (executing program) 2022/12/26 18:19:23 fetching corpus: 11000, signal 257789/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11050, signal 258194/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11100, signal 258524/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11150, signal 258758/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11200, signal 259060/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11250, signal 259614/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11300, signal 259986/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11350, signal 260297/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11400, signal 260614/346585 (executing program) 2022/12/26 18:19:24 fetching corpus: 11450, signal 260945/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11500, signal 261221/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11550, signal 261491/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11600, signal 261780/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11650, signal 262060/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11700, signal 262367/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11750, signal 262607/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11800, signal 262827/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11850, signal 263127/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11900, signal 263415/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 11950, signal 263719/346585 (executing program) 2022/12/26 18:19:25 fetching corpus: 12000, signal 263912/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12050, signal 264251/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12100, signal 264543/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12150, signal 264841/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12200, signal 265216/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12250, signal 265468/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12300, signal 265711/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12350, signal 266014/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12400, signal 266208/346585 (executing program) 2022/12/26 18:19:26 fetching corpus: 12450, signal 266434/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12500, signal 266665/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12550, signal 266935/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12600, signal 267162/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12650, signal 267396/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12700, signal 267604/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12750, signal 268092/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12800, signal 268342/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12850, signal 268635/346585 (executing program) 2022/12/26 18:19:27 fetching corpus: 12900, signal 268928/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 12950, signal 269208/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13000, signal 269482/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13050, signal 269731/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13100, signal 270019/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13150, signal 270234/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13200, signal 270504/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13250, signal 270734/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13300, signal 271051/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13350, signal 271333/346585 (executing program) 2022/12/26 18:19:28 fetching corpus: 13400, signal 271525/346585 (executing program) 2022/12/26 18:19:29 fetching corpus: 13450, signal 271716/346585 (executing program) 2022/12/26 18:19:29 fetching corpus: 13500, signal 271923/346585 (executing program) 2022/12/26 18:19:29 fetching corpus: 13550, signal 272248/346585 (executing program) 2022/12/26 18:19:29 fetching corpus: 13589, signal 272480/346585 (executing program) 2022/12/26 18:19:29 fetching corpus: 13589, signal 272480/346585 (executing program) 2022/12/26 18:19:31 starting 8 fuzzer processes 18:19:31 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"c57b1d2cd57bfb1565517ce01cbc3efa", 0x0, 0x0, {0xfffffffffffff801, 0x8d}, {0x4, 0x1}, 0x9, [0x68b, 0x100000001, 0xb92a, 0xf102, 0x3, 0x8, 0x4, 0x200, 0x6, 0xfff, 0xfffffffffffff795, 0x5e65, 0xada, 0x6, 0xfffffffffffffffc, 0x7]}) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r1, &(0x7f00000001c0)=0x7f, 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xb5bb}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x82, 0x5, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, 0x8, 0x7, 0x9, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x2d, 0x6, 0x2, 0x2, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x8, 0x7800, 0x32, 0x7}}) r5 = socket$inet6(0xa, 0x800, 0xfffffff7) r6 = dup3(r5, r0, 0x80000) fallocate(r6, 0x0, 0x401, 0x4) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x4, 0xa, &(0x7f0000001a80)=[{&(0x7f0000000440)="c68982c199aee79492ed43c6184fc3739f8c48865bcfda0be0ce95930690858e0b54d10827fdb16911dd1b597ff03e550abb3a699c7b0fe96a8be95bd3b1ba288f65dcc02199526622ae37b31a73ef6957a2eca6e94cc15b5c2176548f753d949399f2bf4c7999bf877d45e7c9ef294e2a7027fd90", 0x75, 0x8d6}, {&(0x7f00000004c0)="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", 0xfb, 0x401}, {&(0x7f00000005c0)="9aecea138703ced2d818fb0599c75404a71481c06fd5a5da590fc761efba821cf1c61589ac145ee93c26893b2cc9b66d7ecd22d8ae4f9d4d50a8d4393f4573d2baf674434f259553e1159e3f55a1231783cd923da46653a77436bf17f567a95ce87d6c00f624eed3d85d0a643ba2774d2ea727f24f6e13fd79b2a9f17354213f52705bad74417c0160d40925073e0111d3ebc00220df3e955908c8e202e0ea86676460c5134aef71ab93b5ecc45d9ae7de1a374a503c53979ffdc7583cf5550f8367ff80e981f5bf40f6981de8a1d573602ff2505d48d91e3bda17082afdc13bd1a18c7050ecafca46e92749c174e34334afefb5e08fa412f47f47cf7b52711cccffd6b58997f05121ac413883ca809f2716fbd47d12ed29a589d22395fea314254166e7e21d0d59f4ccfe31b891a629063d8871e6ce8ab278b2641ecfc6bb76b9f867e1602b9485163fd12363af6d7063e3631122a441d434031150d38a157173e0e9c3e68cff2a3eebbf19b4381bd7afd3a25afda4e52847c9fab0b377e2f870689d662b4c17a589585281aabf531f6caed356ff824966c390b32730f00dd8ba134118b8274836a4a974963e58f76cae61c472eb5a557266e9ff25c4f89600f297ac5de516f2068053990e11f53fab5af534eb499460bb12bdd5e4c4372641828a3a2d13017d4a96bc9c47c3064ce247af69f2892734891e9d123765aeadf237a9b0fd492bdb17d4523f3bb665c19c51999f397631e4e3f3145acec02ac59907f52705a98ab612ac39ed47620f3696b901ff6653e64ba6bdcaeee6cc746b863eb03d498065bb7a73b92261bee36bbd9a067021b659cd5088f8b9e069993a075c4ef7eb14f17619ed2f09aa17288ebd85f4a059988b67583a064dafd337550d9ec55d4f6e5b8d224ed10427796ae461c692414cb5c99a674d5e9192c61d920d16e1f1237b95d62b7b62cf09c8540890a64d51e67f0bcebc6c64c06afde7b5dfe91b61ba96da2d2dcf704e3bc73c45c4a81989fcccf8146cb829450d633335921bb5a3a82cc595c18f1ce2dd22c649fa2d438d5a0c5296d7535f9e9f28ae8db446a8757c3d7999df1cd48ad794ff968b0d6ff300399cc37a149baa7b300c754503501989bb6cf124d98b324370959e26c9fa46844e82a8f2edc3411844244b083845724f5302b0928fe414b05ab0b7a0352d661dd82477b0f9bb899eb32f0037bd71bcf9b8a6aaeffdc9303caae939621d582274fd011a1ca2bf529ea9bb3db4feecdc8377a5e45c25383805417a615b4b2737441df90d06d4b2efd3ed34e19d592d74a1774a4eb0a71f81f541338ef5f07af213c7bd6a0a2e8db2a393dec57b71901037737e360da82c7e75a319bf65b38b765f5e7c0374f6c92002b2a935b62d4680b549e39d9dc40babefccb652a240ef0ca32b762b5951434313cd2f9e030d6e5b458155883b80c8f5ddf81f1a3c150a1a61d792ebffc91cf94fd02a008822b9ccd8172ca243ceaea9bc7170b8d03a383c621d1b2703e2af70f67a96d721b103275986cccc3fae8a0b051e900692b7a137fc76878bcf30a11b7a5e08a3ef49e62baf49b43c4c0239f63f0474cc51d15daa322a9d8a9e045797f16770834157455ecbfeb414c7559006b5aee051f6b5fd522f69c24ca126141f047aac019f0b8970b7a9d97381bff714adb758f27ca3c94f2afb459bd6a960ffeb8e7c3bea44e86507043ed757393737cacc229b4b7012e9a9c2dad67013f5db51adf8275d2a10dae5baeb9f5146fbf1996d960afb496e92357ee34bebfc559e710c5fc369833112883902a1a7bb214c0c67d5c044515e55da515011f5a04132f3c5aefe035777c5b13c04c0bb701857c08c15efa8a2acb698d12b985b6d13bc0defa603d385dee16828b3dcb71fc48c92bcc39004653f5e34ab1da3209e4d2933b3ab444d3b2d1e74750f67a8a3ba78af79f593b05e3ce6644b0d2e51e7adb4274c79bad0a2ebe6659e1bc1632a369a078606974c3b9dcaac4da7a6018a97a84bd9f9e98a3c284da5321955db863bc479b5324c37cd71a749dc21896d3c4895c7ddb790b0ed5fc207d1a634989fda9da9d5c8de5943665d62091f5a7a178cd6e18509d69a374d95604fa736fca84bfa1ccc0e5473856154f8dec8f2740435cedece4e336429bd100a7fcd93f20a7e4ae0a59a55b4e37645da45a30cd0346dc4dfeb2d5131d46296c859875db9211eb6d50d8413b28fced6232d3f79b685901b096ac1cc1cef2262ff7c6fc95c67190389c3424943c391810dde530c2efb63d759c25ac79e73c085df89345823e8942a2152cee75a58568ef506610f31c49c0a49da7a7eb6692b15fd91ee51fdff916926970449f508de4e0381c61fa3129b2c149d5d28485063f750781ae7558b959dc6dce08ca02b7324c32dbee9857ca1b523815822951df921f1fd186d8ca63388993ca908620d9792eda45b4438ef37cb051a5809369ea1325c171de6b00a1e4184c2d7008c98897dfe239b495d10c75075c9cdae60fcf519fed1524ab16b18e28537c1cbd72d78e80b4f1ba33d530a69d95ce185999c487d4a181cfb46076c3890018678c244be0b59a32ff871affd7064ce34e23dc26ab3900fcd90bfb2762a899f75bd158b8157e1e2c75ac5b2058a0fe886abcc75d619ba0f80fac74f476f3f2f839f19fdc89bd6309b29f8651a87efcf51d23fd11d07cbf9c61c7f4a1c5d965fca23206320c4e628294abf11bc9e58cd9ad8cfd3ea4776b75e7e3e689e2ee9d82e628d88ae97a26d1b3b85a3b5c95172212ec7ce49e89ad394668c40f5512f18150880d2035e6cfe2c6954395a5ad513f67aab4df4fd300966bf6f6e8a3e520cb1a545d4694e8003bd1f7148b2691b7eab613cb4e52faf187876cf99d44105a816057cd1a43ef51f5bbf86fa01dfc03cc871b836f080bab184b34317f1b43ea13b3ac900f9ab876a739612d2de4ebe9ad821af0fd91f5b00da2ca1bcaa1a3c7222a8679f17629259014195f48055f9d8d3d9e6d39c8bd7ae76ba6543fde530aa3d3a8e43bbb05f5e1b502f3514275a6c80b4747b9391f55e8e554b161cf09474e203610da740350a737da2106626c8572be71242c51f4055f186b2d81446629b16de9c6154f725c9c38c79a13ff8f043a0ccd54e0d8e21d6c63f241aced61b1f597b861d5d3eeffbe3c62b294a3e2ca996cb72ace701ef5b4f2969e6a381f2d95deb83899bf87ef7280ad20a9b9fdcb034faf5a8cbbac69beb13aa07e57846fc0a4c8db0d8a95c6e01fdf3704ef7c35ecaac2275f3953c0d8ce765ba839a1b6a452a7f50c8de2516f6bca37ae3f7ce97ab72d96b3355c2a45023a031146210969a64b9398cd842f64a373c690d1fe30a2182a45cb81634e4a3b2acadd7068cbaa3aa075fbca8dbf251b30e6fadd6421130d7d7d6c005c97c5a61579b6ea529e1e543f93387ec342557ff04488780bec95620c6ccc13850029b3230183befc53e144173949aa60108b0b738b762242ee946e354727b0f06a5c48bdbc1117e2773e3b9ca9eeae4bebc00bfa43fa1bda66df2994ca4252838b61862104786e09df6cdb72e9271ce2a18a60f3a2585fc4e8db22cbe6dd011afdc756773703884770b12c282a3406d27e2d771b65fd036ea672ad11bd699727cf0d48e3ee9c27e10d8664a7e26d35f936876e121c01458ae12e4f177734ef9e78cd5662b2db83503803cf04642b9b35980c3c26b539b2fe1bcf8d7199e683cf1bb6d19d111aa12c7fa0f9d54489bad3590a32aadad8d9743542c5ce1f8df765a5fa695cbff24ec787e4bf9d7d082476f3c136d3435e92c3f01039452d252e2ed0e51f8bcae63c3f3e071bebfde2f539151433027b06d34c79917fb150f1f725477c315fb359d93ce6c23d4261022da6e22f6f4c1f0e86ceba82858355d2fdf434d114bd6c02f3632897054a7f3e55b32ab34ba73766d4f38c9dddffaf3b1b2241c9e58e74f6be797646c4e8e1364f6db7368ef09b26929c818d7e71090326144ee21fb8b8436ec5644e3b1ef7815886e5fb700b78828ee28a6a4d9f76627c2bbe392dfc8c44106320bfd677a136bccf10f96a771c7cc95e5387a329811fc7f4f44936ec950cbe12beb098588f248c4aaf3b9618a20096e7191a6311247ded7bac27808e43148a902897fabacaad6058c511c490faef6f28323f025640a2644ecc05fb49e4898fac3da66bccddfab95d937468e61c9ce46ce1463161a77f463373404f0deffb7faef6b431f5ad1b7fb65a62ad185a80cdfa4fe43fbabe716ec57c8844d8f2f95114ed0eb218bbc4a63049a4d16945d40edff88aa3620682c355dcddd64d3ae66338d4d0b5073959ab3bad4d3d7104a739ad0dd47c1c009236b9ca0fe44b01a31909dabd1a285fb74f01d44adc63a2c42dd5948de2f5514a14d3f86c2c7483e69c6e4f55ed26c683452db61f3cd054dc18f94e538bcd44b251aa966770918aa4b44a0f7fafdd5d87f246126b54ace9a87b64956bd245b2164c5b57f81f74b4c9e1947d7dc2558e5a7724031a499c9f989f6bbe67af61ffaa3bd9162b74877c8e3fa72bf1436681dbe7fc4b082cb0739787ab7bbb27f5b361c9d504750179f0cdc9541deb1b75fb6252af4da5eb29e6b97fb4f1cc725173a47125b0b3bf6d1a994845ef0f81bcb2d2f86286a35b883795cd41351653ef4dd9f3771559209c4f72134ce714669154fbcbd87a1fe051541e32dcca54820609307ef2a7eeace0caddd4207f4b26dd1e3e4918d9294c03598871d38c6030600b4dab73e2f90838669627567c99d85233a70d3f87341353eb58ea190c2d558c61e1a596e7abada1c713458f40033c6cf3942008e125680bc81d3145c78df0b8d0839c313832240cf0586defb2c07ac9d71aad3256c7f397f733bc7c0ebb1d48b80a86256d2106c5e0a00bc02b84df50a8ac794cd270a290f435dc932edf1ac47659d0dc4581f4c1cd31ba465c1403a71a3fac79009a9db37a87a4d27e70fc3fe3d8ddfed6ce343e3e6159984cec773cfee3fd46377554ba4c89c17a84e155c25f1721b46881ed3011c741faf790d331ea073796fb8e4f3d3923eef48318761e109b3f3f18b92dc04cc3bd39910c5a3f1178f6d95554f7077198d82414bef5d55e7d03b5911e024efcaaad5ed24e78fc34a18df518b4524e0c75762fd1100bdee4f70cda1d6d714e4a4e91bee9b1249ed61d1d52e4251ca258f0b05353bc1f4cff2a4dea18d57069bee1270bf2e1a650701f95708c0495c6d11e2df26d95c5cc13ebee95ae734c778e93a1fbc1ebe1d3cc0d283c449a016b91f9994a13a7422402fa570fb443122d35b88fec02deac785c789ff3479a2ede7a38964fa22e59c5cd668af471200f428d6c1c125040c68a9a5afce119206ac3c6dddd07ffec5e76e72abd1361bc0cc1388c20fd7bc847d7ae37136ccc953250d7a962cda61f869693b3dc3c1c0cf83ffaf287fcdf9e8e6170634a7ce503d30479bc78bef6035ddde3929ea78d14b21190b9deb723966bb8b846df8a58fca639e4b9fbd265262dc6d63828a35e494091c01fb26d3447a150daa0df76f9fdbec56c8d2b6c137bb72ddf450fc5319105e7802d213f9e7a992d8b4843270364d8c9f220b4b36c3351a1ae2b937879944d0c6cf8649a9c45f80973111b75c9b1d727d068acae19276853b571a41fd7e23bc87ee778e94d501445b8230338251c5eea4a66fe576a03877cfbf8a9d8256ba71f36d82859102cf820d06a98d1cc74b8068639d82add6d898e8", 0x1000, 0x5}, {&(0x7f00000015c0)="b63d29e089ccf3cf71350779f84044d00f7051f5fcc969cce217f1358feb166ff8291ffced1b9c6a0d6302cdcc6a9b072c7afd4f67ddbde624a5e62114b29420175c344c59b7d404cb1e0e8d62cd1cf0e9b623463a87968badfd9fb480c463cc80136a4e", 0x64, 0x208c}, {&(0x7f0000001640)="689c5af144575aa65c1fc19eff82017bdfb9929b6bc686dbad8a6c62e652a38988770684135ee845fe7aa8efde44515b3c564af7f86f1e52f86532c10bc2ccbd24981d32845baa814dcf08ffb38e33b0021767227965f4db63e60d2d48834f49484c93f3adc956c9d0370061d1c0d95860dcb7172f1491063f79c817935dccb22783d54da85eed5f91c0ccf00475508fc469a2825aa06bf41559bad4cc4f4138b88450d1ca1bfeee34ff17a503be2a63172b986f1222e791ee946c1625af31d9fd13828e191fd3b8f94076134ae0cd5fc3ddee3b22537445", 0xd8, 0x2}, {&(0x7f0000001740)="5ed08df42db34a1f9e427777ef45a822993078acc5fb02bf0510", 0x1a, 0x3}, {&(0x7f0000001780)="7046173f45b0309defbcbaa39db2129dd717c4d9be3e4041be6253696c4fc031c37a801d8bccfb63b9e7b456dab79ec5a39315f1f74cc4a4d182e7a1956d0fb5f987f5081d4bd2fbc05be8bdf7ef57d6d926944305c9d5bf8ff7ddff6e52692007cae91de3b12166b858360a806194aec24b1ea6ed9573e8a284bb32d2070e65f882e7024ef349ac202232009e2ca19c78f70a1ff76dbd6ef6c3d2844ca093c20dcaf46d64ec16f0306c73fcd24b72fec0a6fcde66a01c424ab72f4a2855831808be9b7ee5b35b5e61ad1e09997c69a3cc6b95071f1cef55c5ffea0430112c4dc7277b70e8f92b0c2e", 0xe9, 0x10000}, {&(0x7f0000001880)="b7d5b6803eef10787ff0e885ec", 0xd, 0x1ff}, {&(0x7f00000018c0)="e7276054c3589443e29a65142d604d9aaa52bf8870084e19c9521514419cfb27666449757d1ee3e14820aecc7742a0002ed7f541b9a8d48eae59b75c2c7fe34f51ce229c2159d0db350df2443f51d05479a038daff10c7bf733417d89b607032df5095dc8270ce49d9996655e36a8ccef125ba1c5c24eb1c26c8d03204d6da71634b74997723634abc4279e0", 0x8c, 0x7ff}, {&(0x7f0000001980)="6beac63496298f7aa1ee0b3dfec28612805095da74ed6ed259c87ad73e9abb7f2295bb4a539aa9a8bc6aed794a18000b01aee4f5bfd6ca9276b99bd82ac4b267652e9027a2b83e660d7b801692f0ee7980a0f0b76aaad51054ee4166e98d612956526a0366df82f0b46e72ee271d82af12e9041f420fdcc3a9555a20543e8603f531915765287f33001846db206609693d6711f7b78e3767b5e262b33ad84129987db46f3d4d621796e0e277a5c63ae9dc4204065a1fb25feb84f3bf70028f19f543", 0xc2, 0x5}], 0x1040020, &(0x7f0000001b80)={[{@shortname_mixed}, {@shortname_lower}, {@shortname_win95}], [{@fowner_lt={'fowner<', 0xee00}}, {@permit_directio}, {@hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001d40)={'erspan0\x00', &(0x7f0000001c40)={'gre0\x00', r4, 0x1, 0x7, 0x9, 0xa08, {{0x2a, 0x4, 0x1, 0x6, 0xa8, 0x67, 0x0, 0x7, 0x2f, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0xc, 0x11, 0x3, 0x4, [{@rand_addr=0x64010101, 0xffffffff}]}, @end, @ssrr={0x89, 0x7, 0x3e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0xf, [{@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x610}, {@rand_addr=0x64010101}, {@multicast1, 0xfffffffd}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}]}, @noop, @end, @timestamp_addr={0x44, 0x44, 0xe4, 0x1, 0x8, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xe6}, {@multicast1, 0x7}, {@loopback, 0xb764}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x1}, {@loopback, 0x24}, {@remote, 0x3f}]}]}}}}}) sendmsg$nl_xfrm(r2, &(0x7f0000001f00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)=@allocspi={0x10c, 0x16, 0x200, 0x70bd26, 0x25dfdbff, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@remote, 0x4e20, 0x9, 0x4e22, 0x401, 0xa, 0x20, 0x80, 0x6, r7, 0xee01}, {@in=@local, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x762e3f3e, 0x0, 0x3ff, 0x1500000000000000, 0x5, 0x56, 0x7, 0xfffffffffffffffa}, {0x101, 0x81, 0x3, 0x5}, {0xfffffffa, 0x7fffffff, 0x5}, 0x70bd2b, 0x3501, 0xa, 0x0, 0x20, 0x2}, 0x7fff, 0x8}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @etimer_thresh={0x8, 0xc, 0x71c000}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000001f40)) preadv(r5, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/252, 0xfc}], 0x1, 0xfff, 0x5) recvmsg$unix(r2, &(0x7f0000002240)={&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f0000002140)=""/39, 0x27}], 0x1, &(0x7f00000021c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x40000020) sendmsg$nl_xfrm(r8, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)=@newspdinfo={0x2c, 0x24, 0x400, 0x70bd25, 0x25dfdbfe, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048000}, 0x4000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002480)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r2, 0x0, &(0x7f0000002380)="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", 0xfb, 0x2000}, 0x3) 18:19:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a200, 0x40) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000840), 0x200000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r3 = syz_io_uring_setup(0x1bbf, &(0x7f0000000980)={0x0, 0x9153, 0x8, 0x1, 0x299, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xcef) r6 = syz_open_dev$evdev(&(0x7f0000000a80), 0xd3, 0x20000) r7 = fork() clone3(&(0x7f0000000d80)={0x55501f69aef16a34, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, {0x3c}, &(0x7f0000000b80)=""/247, 0xf7, &(0x7f0000000c80)=""/158, &(0x7f0000000d40)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7, {r0}}, 0x58) r9 = getgid() r10 = accept$unix(r0, &(0x7f0000000e00)=@abs, &(0x7f0000000e80)=0x6e) r11 = openat$random(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8000, 0x0) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000f00)='ns/time_for_children\x00') r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x20080) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002840)=0x0) getgroups(0x2, &(0x7f0000002880)=[0xffffffffffffffff, 0xee01]) getresgid(&(0x7f00000028c0), &(0x7f0000002900)=0x0, &(0x7f0000002940)) r17 = syz_open_dev$sg(&(0x7f00000046c0), 0x40, 0xc40) sendmmsg$unix(r0, &(0x7f0000004780)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000000c0)="377a50814db0f46e7ccfab45ac1d3e726adc56868fc067c7cf5714b4dd78efa58bae83f837b125af1a1004330e7499b0c2c3da2c023d1fc5547e36a080c0ab665729667d53d0dc6eef3186d0d69de9d77d7f74bab9bbfe819f767e8059daf0bf1b54428134e754b9a8ac359fd4e65404061c04d0e27bbb568f852287ffc8b58a4d3ea92f2fb3126090fdf1deecd238e3d55b1f6deb6919a545b735f367b162", 0x9f}, {&(0x7f0000000180)="e6adfd69fd2d61c572777cfea6649624", 0x10}, {&(0x7f00000001c0)="fb509f1bb47beb5ec759ac961c7ec733c9d7336f2f23aa1a935edd0e3b853540a63c3d9d8bc449c2497c054910aea68fa3f1ea7c71b17a49932e101731e9c16c4dc5629756c4d9bf08506a7cc756bae484e014b4b44d10253db23348ff00591c547b6228302f1da1092a770657a3bbf0d2b59771eafbc2445d90b8983399850c33ae3450015acf5f42a7b0be36c71496aeea2cfb689e0fc953eaf5bd8028824ed8b2f1e31dff70371e9cb3145834f7", 0xaf}, {&(0x7f0000000280)="5523dab8ccda5e4810f36f6d16cd851840b36cd908d76b77a5759e972b87df7739a7a3e099541dd9314e4f1e3146adbf4d40ba2a09c756c2f567921af83ab60d5f3187ecf848cb7d29482b4423bf03d528a044abae1f94260b81cbb993eede4e4f5076111f2fd36296541080100c41d996aab60d94c48a399a69e5eeb94ee26c603fb8edd8bd67c28d35b8c0712375b02a05b89e47972baaee638e41c5b87c55", 0xa0}, {&(0x7f0000000340)="90f42bb999b171d719cf10118d4bbc234f56ded888bfc970795a38729fe230e21714867669be7e791351668014a68bb5c2229277af5f63ffc725ff73d03fb1485de59d8d12ce6b8860f22ee2675d8202f7332b89f3216f0e01753243472ec18e62ac8e769007906bdfc3b895ee70ac388e9644ca03d3bf7767a5c8f2353250b7a0e77c711b3a684fca9969a7a5ccb7de4360", 0x92}, {&(0x7f0000000400)="315bb4cd7101231cae7ec78a00a6b12d3f74dc4dd4b33938acd6b00745d3398b997d8bad780a13bc7ed5d5e3809573982d27859b9b0ea935ded573fe10e7e55eb0d4fe3fafc41fa269939b95fa67fd6d0ef68952da236787b11874ab558a20ce359d1b66bedb21a211ef78301b453e8f4113d882f0c1091b70b91a7eefbc856630cdf0", 0x83}, {&(0x7f00000004c0)="e745fc7bdfcd6aea3db597fb4ea6ba0074b03d6ef42cd95e027bb2ce2d1fa3f5586b91183c2f0bb5c088c6904dc13372c5d6689575221ceeedf88e95c14345770ef71b12d0121c70debc3b206f681ecaaea56f5ff0ac03b6b8ed975e3327d0966d2d5f5ba8fad2f3d5839b0658fd73d876268634ab87002a2322da703063614853d3a03455ed0cb444f441b283371c4ab415ffcc7e38c21f43", 0x99}, {&(0x7f0000000580)="a8d37bfa548f5b868f7ce1a31b497f08eba17afe225370eaaedebbeb0c190dcbbeb1237a85e2dd82b50c522dc116ac00f32f865d846ce223bda55c5029f2d5a111818d9030c7b939046cf42107491761e13e25c1b04942569b274faf6c4a100ccc6b71cf10586ce7ca3aaec21f1bbb404e00ab8e727df0b2897492f423d81e7ce907f49c6dd5eff55bcce940208fb16b8f9f4318a68270", 0x97}, {&(0x7f0000000640)="c73660afeb55d21279b0c8ca75fa266a4ed5879e6a66af9153560459b43f6126f1f5f99d85ab9acaa0916990d552760532791f776c1072848d51ab13b8151dca8c49a335e69bce7dfde7a9b6d8ce9191248d3cf28d62d1239144afb056a32b891996a765644fb3f86a5f91e2d68d2e2ac638af4af4ad776c8b11e8c43c931525c1aca6ef", 0x84}, {&(0x7f0000000700)="916a6d3455a3288b955b2c0746815c96581acb205199bbc5166651b0f37261cd6430a97a33ebaaadbe4b0d7d6866b1eee534c7c8dd9d6a404a402eaca1c7a20f5a49387e2e1e18391cbcc347997196a867791a04ef2edfe5da229321cff0b97ffdc5ca31db118b4783db906132cea8cf", 0x70}], 0xa, &(0x7f0000000f80)=[@rights={{0x2c, 0x1, 0x1, [r1, r2, r0, r3, r4, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}, @rights={{0x20, 0x1, 0x1, [r0, r10, r11, r12]}}, @rights={{0x14, 0x1, 0x1, [r13]}}], 0xa8, 0x4000010}}, {{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002500)=[{&(0x7f00000010c0)="4992e4dc37204eca27d845eff7f8ba5bb18b9cb88cb35e09a0c03507c90d82db46f138ea319c5a96689084c4a63dd438", 0x30}, {&(0x7f0000001100)="682c86e1790b5fe0fcbdbf9846d5b1b88d330c71b83f8307b0f03137e0fa6d9e", 0x20}, {&(0x7f0000001140)="244da73df395d78e219e", 0xa}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="ebc9df92f0eca94aa4e41c36038a853d34bc2203a420cd9a439be3f0ee3c0311887c7030eca011444ff36c56d9e42f4e9813c0e77410141b2345c50b8c3ad61cc2e7c6863e8bc53a7c874e3b8192f5d05cc3a7fbe3b0c8fdac7227c4834478534d7bce411fa0ab699bc76f377a0687a70ba60db32a6a5230d7", 0x79}, {&(0x7f0000002200)="cd6584d1493e514657f09a40a5c1aa4001aba58f2626509f6d7b2fb3376eaf5c4bb60602deac8e10fa8f66c35afd5cbbe2", 0x31}, {&(0x7f0000002240)="adf88c6c625df1e2d9c0f5670a1c5184f5be80cee47de3cdda516d18dc1ef4e0ebf35ea63fbb779b8a896f6d6f68bc57d8d4a4fd08d21533a35629f0379d3a5e127d6b0a3477ff60db32487ffd73ea208e56d45d333836d05ec5238311790fe6a9db6ba8a793c710460180e9f281aa92159339547505299b7cd3777594b4bf50f997ca6c9cf0e2194660aab5aeff7cb688ab717c8a77bff67c0c28cb70c73dfccd1916f9ee9fb550f47e8af61dd42632a9ff950adb97fc4dcd4fbcd7e60906304fc0184aa7df9d6d6421473fb873c2e9ccd4cdce2b300ceaf7accd4a425fb89e34", 0xe1}, {&(0x7f0000002340)="1844201141359a07bb1e0a716cdc277e31737fe51dabbb1355d55b940167fed27752b42861bd947613e010f7a9d7", 0x2e}, {&(0x7f0000002380)="24ee8b82f0bbf36c55d6597a8b98c731ef266d784691096c8c6782310010410600cfc89df7db96d08e02640c47074456ef0ce57ecc6496e928b7dc3831a812e5d3f4d02ea2f957127f5644b3d4aad9976eece03ef2f1286e36498843faba86d726a90b4c554b6f356d503a83c64e7438c6d631c382159990f299b582bda4c9cebc40f214b9f4b48e75213937bc14f6907241baaa508bb73d334129c5adab07e598e9593410b48e81a3115befcc02392ba83240e9b040aa14ea1a8eacbff104eab924ed61d1772124e8c25bfc8dbc41de3f4b302fbcb75a84197b7b86", 0xdc}, {&(0x7f0000002480)="bade7e9c998f711b9ab0ef673513d70a2ff9702c5744703e57ce29a90fcfa91e7322bc50f0d1f40f7c9a881c9db68a90532e55c62bd6218958f0261f98cbd2f0b8cc30cb2e228793b4111c8da881a07ebc36b406374d54274cd690e1109a5801d4bdb367e2db", 0x66}], 0xa, 0x0, 0x0, 0x20000001}}, {{&(0x7f00000025c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002640)="476217357ba2a0f9424ec13494bcc2bbd7f1c4280f28c456464efa7987ed734d36ca51ac32eec7d840ce1d1c245d39f1287995b0900b1a472ec742a07fcdd39d304d1aea053055529aaca8305bb5f9a70f2b3527ee2920773f5443ae136026d45ed33b1426762b8df5cdd36b4e0c872621a19e4b076e0946b89d35c83c58882821c21649949df5ce056f2e721a23868ef0c1e39866cb1eb3a22c473d7c131c57475dff786a281a51fe119021713711ad833f8454f06b85b6c15f194d72f92064e8118f5b7ac0faeb34d8de7101c9", 0xce}, {&(0x7f0000002740)="bf838969d000d1f13c1bd1b2f260aafca86b91480f6ccf5488e6142477519b281064b23c3cae7a2f5e6139bf4c1775594abd7ed89bfbd47d7de8b30dc3b4775bafe448368ce3a6fa11165e2c70529249da56d070166c1b4553337946ec835d75eda789deda00acac359e4bbf1eb44b717fbd49843ae5b2b51aa8809371f642d479d55ee4bfb72c7944b8f485a6242f156066b9ee3d9d593e1586073128f9b6c6f888bdd1ca40f94a36bfe72442c0169b42", 0xb1}], 0x2, &(0x7f0000004700)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xee00, r15}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r16}}}, @rights={{0x14, 0x1, 0x1, [r17]}}], 0x58, 0x4000}}], 0x3, 0xc001) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000004840)) 18:19:31 executing program 1: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000000)={{}, "5fb0e71c16b5c15e5d096577a52071d5315069e002a9335f6585dc5ad9635a393f9eb5edbbbfdb9cfcf1e0bb4807a03fd6f2a6a599539019caa44303ab0608738677a3e04b97bc88d344ad08cfa75f94cffbeb7639d03d254a6f82ab5b8136234f3db330b1d82a2eaf5403b9603dfc563fa5d8d555c8317e2194c7651238b2f680f692c2cd03a4e7cb6d154494f54281fbf22748af0021dd2d30811b16b723c666e97ab11a166f1669a7b7f4b554a7be3a95cf29cc209ca168151e6b447984224d479559aa5b92fcf4626bb8dc6a9cfedc5945a3ac08ecd763fcb9b28d3c09b62a4c21f283a1c767c70b95ae6f0ca713249eca5d172cd171860fd431037875697ffeeff4204dcf9a9e687eefe3474bbcdef33d916cefa93b87624bdbb61196a39d496889e87e28024b64a7c019f8c995fc62991bbc3e9458d279692337637bfd115bc625210474e825118ed5fea34e97d23bca52930770fc698ad0b5a354f9707c5bcc3303287bf3b91ab7d672f9da065d3a70bb7745b0f1c95249afd140742d6a33dcf2df078c4ec4fcffe666fc8a7965ba7b2a7ba59f9f021e514771d9ba5050b84fed58c364059fe7cdbc8511cfd82c2183ef2ecd36680b58b5d9b97d530174cbf41db255ec4c30e7bedd9c3f6048208cc01108760e67efff49c9fcb17c1a6823b432d40d1ecdca4477425593dc2780e1da8e106899f61f318c8e2fab7b1447e514ec88a803b2ad21f560630f691de4992113bb6011270dbc9fa2049537e54ff20089acfaf2f6d5872900b568350f3b87a3440afef13a868ad6ae0d9d5331847726aace8c8810373bfde9cb33fccb649336c611382aa8219f4bca2f925aae47b957e1075566cd06cf0176d5142a2ac1e53bcedd3787e1799675913acd321aa513272c7a53e1ace2aa0d91b6717f4b1f10d97545702057f208ffaaed6e7011f1089bc6c1382e73e3b02721efd06d894c3b2e88be96e8af752193293ebb341f16e05135c758fce5bc0e111516b6d393a74ca04ae6e4d40de0f74dd0154f35e03eb34e8d15ad5ddad40544ddbf3e32770c906c6432f6ea4cfd4b5f8dfa785a4311fb93f4a5807e029dd72542e3d76ab6a9170ee00c254a6cc8cb8d39d9e732b66479f2cb6e4e5d068978757c0ca193133f9496ad9199d256f28f39b73dbe1e605b5d7926e5d166b9451b3945bbb4b078d04ed53ed79ffd0f200b6c0161409c7bca54885613e0d3c8119f8e2e117a4f39a1844bc3d1b191ed3051aab8886cb8c774296f244d063ad24620578e8904622f7d3f2fe46a0facb4264bcd45f4316f91a6e636fa7aba59456881ddfe4d3b06424cbc5a2fcd313597feb465ca76e841e9e4186e32b13a8aa1c92cf8062219c29259879bc97a7849c53706bde3558be33dc7843f80517332990ae0deb3cda0c99a9bbaddca33b44c60f9264db5b7798f832f5b7dc52796fb8a33cb08e59fca51866495eac2c2dce8895a52b0dfc036d9df829d35c136f8717a5387a8297839305243258afb427db64c05d242712e88bbfb37f3c76abab0669c9a6ad18f4a1ae69f4236ec898f7ec885ead2aa69f137c8f85de43b5ee7da52aa30156bcf10cb5d8015eb6844b72508e085b14193c448609e2ca20ef7bec4a7667459525f21bd7bf34f186d79223f40c05d1ccf642bdd35e6a7a3e9fe70f31fe3f023349878f1fcd425ddac4732a4637ae5b44c0c91a8e94dfca49e628433ff3c66ff2a3adfa01303cf20e74b69381b03383ebd33d4553367a681b3161d5c242c7045977355d5d6034ea0fa85f171cb25a10a8acb223db1baa236809e026228301120473c862402dcbe5ee43c5b0f4570acc7f447a0d3e96766b6cab21abec1a5986c68c69693ca802c23e71ba50a065272a157be78ae1a6f0591b39fa9a0588a524ab001b06100c88ba358f961a5fc64e8faf7cc07a55df79ad62a910a0e81655c0f148d415bee71106bc5478331461b76bd4e44b74282c2f908b7d692142b9159fa2e4e34575c9f33c24f9f90911a99f6ae10901e3f1ed751c83f534b89f986dc97628b18db5505357ce1c09e6e0240ee5c2596d9156dc629ad33c028066d741a73e35d86e0e28bd147686f1315212f8e11b8b3a69868872d3e443552a30b62248fcc46383685b0a6d6661e25c9114a773d8a8ca5c5667dea849b743f4ab733a67e08d807287ffe76fd654ed038fa26e476ebbd25c80ee7f42d919576e5b10f9ca5ce1760626643ee027f452a6484f9ab5550bd517ad191046ba3388fd7a310325154255e4148b529e35ce754f50052b1a000677b40e42f2409697f905c2f302ff1df9696592cc28c8598ed6df298dcb80cefd5c41a3b700f452cfb3ff4ac9aa21fe6c77de795c5e88404f954496131649b6c5cd6f0529493fa2d094ff72db503c83d5baa04df600d3d52ced2130ee358860053c2e1d4b2ea70dbc89bf01833555a2c3561379582b291f1ebe531e6f3255b07a7a6e77e0e2de03f2733ba7c9588e070d971228cb79f9bb867749264687ef4f3f8236d1d2c5490d4d61245ad016eacd6037da2998b5a97ccce19a2c59ce8f28a9981f1757ba2155fe982cf7460260fb1cb5e38ccde08dc79face92e9ea4e59d8a26c93ca0cc4a1199ca14f90f43e43c9a593287e1f32fef094aa5afc441abd1c77620ffbebeba9825e497c261172f8dc878c7e1ca38e0946c48fd6cddcf72338806a80c092785637b2ab2f98304921d385698e9b6793f761d20646461f3cf9dd5e7598579b579c23ad99acd3b37b159d1dbed7b9de38ebf48eae4c5b16b0fb94450008fb793638ce5cdc53796af36d1442afb053e41eafb75efae20b8ef0a49ee378e4fa8f8b696884ff11c33fee54aa3cfe0386b2d17d7fd0b84e54724499718e198ff9dd80dfee03f06d184000e17f0cd3787352a93550724515869c5d9343af18ea69c3398e57f4d48716df0fcb501179637c47c30b8473ffa3ff0271dec25863c7c0f91d4d11cb9ed9f40e791aa011d8f14470e32ac03f66b3990832c9cf6e6afaa568a4ce7330df618da3c32396249fe20e72e951f8529743a20b885eb6024f9b6511d01f9ebcaa41e56981c53b98e2d0c4ae95f79b62162f28438599df25ff3a20a0d33730f0a9aa567970911e3ba0be4d807eb38377a29aff85537b7d185da206dde8a16a84ebde7c8a0790922b9e2ccb88ffce253c4f742f3177e242d85cea2162294aabf753a67dadaed76b1ccb0ea9e2138f62bccd604227db5bb0812c519719adfe86cfc7e604583b82f41c93f8ef061ad2adc017ff5171c7013542eea72b5ec384feeb635d48dcf68ac9a4e7ae6d1b542a793d25ba7b3c3b1772f7f9f872aa270232b82e7b3988e3e2b7337bef7f6094d5b5865e024273026d12c37ef61e9800b701d28513b408b408cc4d10048500ff709c8dd2a4fd76964ebc1715155eb187493b7a220ba4c91a3a29153a1b7a6ded4a1a6d4f932b33c35a67a72caddd8850af943db1a72466874e3f724e7d5a539ec3cbda4aa5ef71368d08814b9baa392a0012cdf3c9ab727d30020a96794695e62e65fa5ab8ba73ae3f10fcac5fbf44df3781d06be8a478534b68ab67f752b45a8b1db23d9ac5b9a78b36e1b422a9007f373cfb69a114be3d78786f58e630cf05a18d351b22fcb553cfc7f4258f72263fe82f8a14906944dedb43e4f3418c490e7be3f8ce6eec3980946e4188e13ef884bcaf794ee8fa6990e55471fa7faa4327a7d3eb0682ee7d215471d0c374ccff3f83d9a6f377424354827ae63cf249c7ce512a46e70baf129bf7b8e4387ac7bf8f57647014e9830d41e660367a925c21bc0cbc3a1d220d16a7dd938cdcfb1597bbfe15b84743a2a54e636b4099711dc0b311eefaf04baf563056bda96cf4e6fe2112f3ab3bd849b295ccb1a763590e938a2253a91196d434d0343252a6fc8b16b585eb0f3b40213c39ead8f3cd700e553c7b9a9800932c2a12327068e6879725eb8a7bc65c9413354ac6c7d69f02a327b403aedf956826683aba91d6115fc318707025781397ad0345e5fb6621f01771f564257ffe44c2e12721b39fcf14a4b594ba72379e4b1c9a11ecb13a5032c45288e6797dd99110d5c4416681c391995742ae769ad10bdb2900167004c9b27be6d2ed44f0a545e8094489c4688e68500c4ccc3d8da430e8a59c649c9f93a5951cea08948a2b8f25bf24b4dd592eed3d8424efc4ebb557aaf1f95f110e7c5c5baa6c708474ba89b6a5126127ea36b7091e78b5e4740da553645efca3ceaef2f4e56ebe9fc64f384edf0151e4c6bdc10a95dcc59d75b4b65fee6ff9496d6e206a7861cff33aa36774e597a19104a0aaf95f04d0b84b3f25fab37951a4bfe640db36e9b764c66c4c064ac352471272493bcd28c6d0a2a841daa4993cc4285058f4aa46d66a8030ce0b5c4256e2a7c5e035f6a876359067a3bd152c8fcc1a9721c9fe41b16cb0d16404c32647cd655df9334389c4e2e31fee4f4d4d3db0bf67f3619ef8cfe392bdcdc02ef9c70b95933bd9bacf027758800f89c7e4876eb7a91ab15f8730c50bfb916a683a0aa62581d19e19d99982e37325f9b6a47826d8d9d930652cf7dacb6da4d4cc456a2fd483485b9b2d451678ebfdcd0b278d4864dd807fd870a2fccb80bdb7ee5b17e1db4876b1843dd32fb4afd34590c562885f581ae3c6a29900ba98c2cd07cc0286266884b7257776873a7d460cc34902e22b75be6bad70f3caa997ef7b2a0936fb11b3cc3ffc49dd63a09fb5ff9b1674faab6b81dcc6f07b70e2387c76abd8cb8f6a24db6faa3031e6a6c1520a45461b4aaf17d4367172420f362493cecf479df8b3a22f47b588bd77c945e59a4e8aed1e6d670021e74637a3784c46568908df14c21e2a0bd20f1e48f62a6bd10614f42e2c86abaccf1ff581759d42f0b1e898273dcc4ed04519fa676456182b7b55ec45f6574523260052175b7584fbbef70bf9e96a73307213a292abd649cdd4e2b66ff887fe2f2e887136bcbdd3061194ecf5d7cc2e8ccca4ad30a1fc68635453f8b67481dd929b8dd25e5a44d5936a45a3bbb64c959e07b66684b51142b3c666dd110282c42e2396fcea42c433eb1f2471ed18e37fdde4625467d84eeb53da27ad04aa03a8b2aebbe8a3b3d9ee9400edfb3ab86c7617b98c8df12498986be5a52239fe8a8f53d079236b8a0e3538a1e6d820eb5a10333a422a8e4f5b1f464721ec5cdef47d66306ced83e4154c305da1d2ff91b6a3ce49ae17da4cba27eaefc6cc07641a13d552a8799f79c435c8135cf69bf40dbca255455486e8195a581c41b5b3bf5f954c12f786ab39c85bdc51c32351a2f08a89adeae236364ac5d149fba8ca61dccb112941f6354f789777c69ced4c033460b9ff30ffcab6cb479beb9803a39ff17e8d14fd69b92c3266d09d5ff91d38461ff66b350fb6d2803d8b37e36b7b95907cfacaff9032f25ae60ff93096b1944bde5f5b69ac74d63f913f13ac6dd5ca9863574e865f20e79506daaff108894c20b52cef82ea9d53861f7f5a62765a93d2503db9528c4889e7659f37e82b48a18242b4cb46015de9d01af881a4c80395aac5bda32d0dd4263ed649507d1dfd0faa337aaf0ed08d239914e847d19c7d6b139369bec51ef913c930d2c3bb56372b4089bd05838e2060cccf7b0e2fa6a6b3c8432d1498558aaa7ce72a9fba396855eea64ad4cf6e4ff11f63a9663ee290b9a21172d0e48e5a827ca14eda28106be98be89d21488aed5fba499d8cbacb1ad3aee12fd8f4b17567f9bbf884"}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001a40)={0x8, 0x5, {0x80, @usage=0x5b2, 0x0, 0xba5, 0x6, 0x4, 0x8, 0x1f, 0xa0, @usage, 0x5, 0x8, [0x4, 0x6, 0x400, 0x3, 0x1, 0xffffffff00000000]}, {0x10000, @usage=0x2, 0x0, 0xe616347, 0xffff, 0x80000001, 0x4, 0x7, 0x8, @struct={0x6, 0xff}, 0x7, 0x1, [0x5, 0x7, 0xffffffff, 0x4, 0xbb56, 0x5]}, {0x1, @struct={0x1, 0x3}, 0x0, 0x7, 0xd08, 0xdcab, 0x5, 0x51, 0x7a, @struct={0x7ff}, 0xffffffff, 0x2, [0x2, 0xfffffffffffffffa, 0xffffffff, 0x10000, 0x0, 0x20b23591]}, {0x1000, 0x0, 0x1d}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001e40)={0x0, 0x8000, @start={r1, 0x0, "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", "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"}, [0x1, 0x80000001, 0x1, 0x0, 0x88, 0x7ff, 0x3ff, 0x800, 0xfff, 0x400, 0x3f, 0x7, 0x5, 0x1, 0x5, 0x758, 0x2, 0x4, 0x3, 0x1ff, 0xfffffffffffffff8, 0xffffffffffffff96, 0x8800000000000000, 0x800, 0x7fff, 0x5, 0x2, 0xff, 0x7, 0xfffffffffffffffc, 0x1, 0x1, 0x6, 0x9, 0x6, 0x40, 0xfffffffffffff800, 0x8, 0x54, 0x7fff, 0xff, 0x0, 0x0, 0x5, 0x20, 0x200, 0x8, 0x2d, 0x8000000000000, 0x1fdd, 0x8001, 0x20, 0x20, 0x71, 0x7, 0x2, 0xbab, 0x5b59, 0x7, 0x2, 0x9, 0x0, 0x10000, 0x1]}) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000002880)) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000028c0)={0x8}) r3 = socket$inet(0x2, 0x1, 0x8001) sendmmsg$inet(r3, &(0x7f0000004140)=[{{&(0x7f0000002900)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000003d00)=[{&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="232cc825391bbafc07582dc68a4810ab8418584be1d5fba43d09280904a425f10ebb63b05b224e8150aa5e27b238627a4b6b7b4c2facdb4cda9d1af716ad190a7787738ea4986eb95d2d10aabe3ddd5a6f6b8c773189423c913d331ffc61da6fa9ff7717ff9bc629e6505cf487a1103273a66016b28c13f93771b582ac65c9b1a02f4512cd78202f5b9902180ed5c2f677558d1fff56", 0x96}, {&(0x7f0000003a00)="d0968b5e52269b7b17afce865e0ac3d45efdbdae41f109fa5306413e0368f77bee2ff7b046e465bdabe653a7ff626ee7782f7544c9fe6b38ec948c1ada7f521ea0aa408a01228736ceabcf6b32afa544c982412cf5254c460d220d0d6d1584c442c6c8d26567caa1cd37d1ed99a7835819e05d26159eb4c7db52ce5a8f1a7d39df0df6b0fa3d73ab6d3a23e972e9035b11d1848834e0e5dbab6e1e677f8f6eb7f0f338a48669c35d2aaa3fd67840a97f7f755e9cfe2ad2ea7c7406174b2cfe57131e7a3082", 0xc5}, {&(0x7f0000003b00)="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", 0xfa}, {&(0x7f0000003c00)="944dffb3a1ae22d247335784daa9c2412e160453a5703e39009119a40f78a728eea1271cca86b28abaa4df42b65e8accb2fd880db6f1a459b48ae06e76c88c8c9cacaa1ddf83cc4fd0a70f5e2fc2baed324728e9f908e3960a7af25d0da52b9daf9928ce17b724e948594455f4b656bdf8224b0448bf8e63119ec9d74ca15687", 0x80}, {&(0x7f0000003c80)="262dc7d740711d1492a48c84e442f59935b9cdb36057f3971f430daa9e38b8cedfac37872dd0b366546d0e8be6743b49881748cd3c5a8d0a394fedf39b3f22cc67f548d0c03e4d878422be33573bbe92f4a4a352448520a16f34e2d6113fd7f5f646be5addd88f2fd41779d016ff7eda142701", 0x73}], 0x6, &(0x7f0000003d80)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x7, 0x3, 'v'}, @rr={0x7, 0x1b, 0xe8, [@rand_addr=0x64010100, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @loopback]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xd1, [@loopback, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @empty, @broadcast, @remote]}, @timestamp={0x44, 0x10, 0x2f, 0x0, 0x8, [0x5, 0x7fff, 0xb6b]}, @ssrr={0x89, 0x23, 0xc9, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, @multicast1, @remote, @remote, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xa8}}, {{&(0x7f0000003e40)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003f80)=[{&(0x7f0000003e80)="20c9b396091ad43b8b186e568a676034957c57ff2a0cb3c1df203dc6c6168a923bcfd905334409b19be3585f50435f800b0ed851c8ac7e13c76fb5a61f69cb39e62f3e901e0ce4120b8054e4defb640b922fd8ca4d348ce19fb85ac16305a4dc2e7081008cc27c91049474b1ca472e3f3e14766a386a424327ff50d667a4c22e8e8f31f0c6184be654ffe340219cd3c18dd22773e991c8fb47ebe50e10c525e55245408f4b8c945b045e39cacc46c8162da5ac95d69ba17362de814828927064cac12a91e00738915f30847eda11deaa1cfd6e9e4e322ba105619744ffa020dbc886d39443444ccf38543f9ed5275fb0ca311dd2dacaa298a5cb", 0xfa}], 0x1, &(0x7f0000003fc0)=[@ip_retopts={{0x80, 0x0, 0x7, {[@cipso={0x86, 0x16, 0x2, [{0x0, 0x3, '='}, {0x6, 0xd, "4d60d7cd5dd71cb71518ca"}]}, @end, @cipso={0x86, 0xe, 0x1, [{0x2, 0x8, "9e56fbb04f62"}]}, @end, @cipso={0x86, 0x29, 0xbcebf92938a85ff3, [{0x2, 0x11, "74a32d1b5e734bb6cb964e61dea796"}, {0x7, 0x9, "f2594e55096b2c"}, {0x1, 0x9, "b840cfcc046c20"}]}, @generic={0x82, 0x6, "19b85096"}, @generic={0x83, 0xc, "84ab4c0f7c821a1df696"}, @generic={0x0, 0xd, "64496a972e4a642e130a42"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xb3, [@dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @local, @broadcast]}, @timestamp={0x44, 0x18, 0xb2, 0x0, 0x6, [0x66afe33c, 0x200, 0x8, 0x5, 0xfffffffb]}, @ra={0x94, 0x4, 0x1}, @noop, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x170}}], 0x2, 0x0) r4 = signalfd(r3, &(0x7f0000004240)={[0x81]}, 0x8) perf_event_open(&(0x7f00000041c0)={0x0, 0x80, 0x80, 0x7, 0x9, 0x5, 0x0, 0x6, 0x12b0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x40, 0x3, 0x7, 0x4, 0x0, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, r4, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000004280)={0x2, 0xd, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x2, 0x14, 0x2, 0x20, [0x82e, 0x8001, 0x20, 0x8, 0x3, 0x7f, 0xfffffffffffffffe, 0x7, 0x1000, 0x4]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x78) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000004900)={'syztnl2\x00', &(0x7f0000004800)={'erspan0\x00', 0x0, 0x7803, 0x80, 0x2, 0x101, {{0x2f, 0x4, 0x3, 0x6, 0xbc, 0x65, 0x0, 0x7, 0x0, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x4, [{@remote, 0xac8e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010100, 0x2d7f}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x12, 0x3, 0x7, [{@broadcast, 0x5}, {@multicast2, 0x2}, {@empty, 0xf7}, {@local, 0x10000}, {@local, 0x8}, {@empty, 0x5}, {@empty, 0x4}, {@rand_addr=0x64010100, 0x41fbd8ae}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x46, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x8}, {@rand_addr=0x64010100, 0xaa5}, {@multicast2, 0x78}, {@broadcast, 0x5}, {@local, 0x4}, {@local, 0x5}]}]}}}}}) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000004940)={@rand_addr, @private, 0x0}, &(0x7f0000004980)=0xc) sendmmsg$inet(r3, &(0x7f00000071c0)=[{{&(0x7f0000004300)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000004440)=[{&(0x7f0000004340)="c1e2d525241d2b913707b1d2f99e7f16051c2cba4bf24a2d75518e5cac3baf2c29df5e793f67b727c501e3b9a952ddd67d78e1a2aa18fe1fd8f5d1a423d4d51fee909aa7d5004d3dc228f2d2492e284b5af9a505ef221dea88f5100acf576353525502194d38f8c9129b4f3057415701700d2b465c748745c1a033704d4e6c5450982e3ba5f2fe030dd7a505", 0x8c}, {&(0x7f0000004400)="1e06e220a4d6282f45374bc8b988b543f7", 0x11}], 0x2, &(0x7f0000004480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x14af465f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xc0, [@multicast2, @loopback, @loopback]}, @timestamp_addr={0x44, 0x24, 0x8, 0x1, 0x0, [{@local, 0x80}, {@local, 0x4}, {@multicast2, 0x101}, {@loopback, 0xee}]}, @lsrr={0x83, 0x7, 0xc, [@local]}, @noop]}}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000004540)="90244b50d52613a5fce0dcc2fc653c7af1fe06b6a48ea4e9428bc96556680462480b344ee794efa25f3a9f3f9e6def7e7c1bffdb01f17003f3422c14c751bac3b7ce8a069da0008239f65d9f96038c9528d54c80f79b162b7854f9756a8e4a6589d1449a7fd738dc7a2c40602af6ccae9d92c5ba5038401ff278809f7873364df792652975606496da0e", 0x8a}, {&(0x7f0000004600)="4bc263885e205d90172304812b23eaa5b462996eae1ea0034dd0e223edfcc58bd3b27371c8a97c9f5b367cbdaaec353be411b867c250374cab5669ead0c9c70da2571da729fc1392cd34362e431936409f3257a03a1045845650ab3214cfb1d8764124c29c9f9ca45547605b3664bdb444612d16da461fc9b0293d4c9b4253da", 0x80}, {&(0x7f0000004680)="5eb463e98e3ae554363f7ddb6b7bb0595351301b0e0e1c6d9020247febc7a289488e3fccdc903e92531833f04d8345d0caaf6d45fb35e976a52f0b36af872acd1c01fd8b741a83fb9e22407c2b57e661bb4df377112ea3c8fe72f2798b70ab771fd5c48e", 0x64}, {&(0x7f0000004700)="c6382668f08d53d52a28dcf97ce1163924d99bcb5d75f6eb17f0a1ab64484d56363bfee3e9656fdb5c", 0x29}, {&(0x7f0000004740)}], 0x5, &(0x7f00000049c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x6, [{@multicast1, 0x400}]}, @timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x7, [{@empty, 0x7f}]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x19, [@broadcast, @remote]}, @lsrr={0x83, 0xb, 0x59, [@remote, @rand_addr=0x64010102]}, @end, @timestamp_addr={0x44, 0x14, 0x75, 0x1, 0x3, [{@local, 0x2}, {@local, 0x9}]}, @rr={0x7, 0x7, 0x55, [@multicast2]}, @noop, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x1, 0x8, "c220013c6149"}, {0x5, 0xf, "4d9c01b36cb33058c8be5c723c"}, {0x7, 0x7, "061c638744"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2bd8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1e55}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @empty}}}], 0x170}}, {{&(0x7f0000004b40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000007080)=[{&(0x7f0000004b80)="5ba284e98b7bc836fa8f17e0247bd6e20e5d3bcb2143e8450053507cf05face9e18dbe7e50d356a1f2d1", 0x2a}, {&(0x7f0000004bc0)="4bc198340f10b5a542fde4c7ddd789cd44b0d09377d92136cc4dbf98145e5938a1d70a75804419cfa898f0dda2780dd11375e53ea76316fed9fae358ef6079198fd4b9757162fbb79730bf3478f7e2bc026b9b484698f37b05d9cac2e66297a882b0853cc1fa89351a86bb7be72d0d5175df33129fce6a3a4088d47bd2d21608edffefe8e5081e23b3eb22033881af3ecc2a2d55e391c2c8e3d3f336653494891d9627e32c94ef3ef7b7b8a523071fe898a9f732a3abb282", 0xb8}, {&(0x7f0000004c80)="a69d92cd4504a72b5b097a79d932499478dec58a794a7c7b5d957d56db5a3b3dab804111b0335e3b5b15456a6433c3cc7fca1f437ac2f5c4d413616d22ff9af3f67f0dbb4d3024876947c69761492469635b8e48ba0bbb177ec1d657071d94d86b98c6d6b782a9683e8d62a985237987a13d3bf646b54159e8354329937955ab2b82c87e6e84f3559c1e9965311640883ef7b467db99e5ba159e58a45755ad17100f31504f55eaf0386bb82e68be8ea39f42e6e5379699f644fc4487260e5784594def0658e16b05432c26462493ddd61c903196d619adfbd7327c29c3c688696b6591d87a4dab66f42452597e138fa3a4f6e7aca1a8b77dbfcc9b04458fd9c551811bc6793fe86189f3cad443606864f7cb4698468dc7b8af7525fd3cfa3485f5c1cb68be42fe051eab327e09480e6c95743f9e83ec92791459ecea4e6a502654c338d2af8f8cc69827d3b193f1ef1fa070fd391997fc5a0e60cdd434d2096ba5ecfc73bed8eb7e438e757898d677fbed16434aa143ac050ac276ee244d597417b81e5f721d9850b62401646d7cbf56ff7bfeb9dd1a6dd4e35b9de93987b8335979836cb39d311aca2553fde7553a74f4e898ff9400267e68128deefbb67e27b8fe9b1e870ea00e7689151430bffe3427d15ac11acec6aaada74225201e7635c57c094a25abd2236d392d34c0f486bde162484ddae6e8f4ac8d17ce5e57dd528a078d8f2f522df43fb955d11ecb4a55ac7f8f6c3b5873fa00575e0415cb35e336cae14e86457cb09eb89448b1271c37be76710934e97053e8b06dfa62dc3c44d2ca08c9bb1a1376a5a9482ae10523f54a5be3216a5986be6a43d9560650c596bd333e433dc0c3586389daa6067e6682496b7776bd3a544914c1e451d3d313237c2e27f37dff7e081a4f2dda22e81ad93f36fb982267e26d6317922464086fb5d50c374cea02a2d61ca9f2fe325df01b8ee8c23e776fb5afdba07c5b1b7b2da50dbabf4f813e68640bcbbb1212753e1f65f3f5e2d4c8688944bab2a88e866b29b7f04fc9450d2363c8460d743c60a6b42d79e4e5e30b65e8c1c5de85896d0b96cc12b297a3c5d7205f65bb808cedfb7d9470ecc525c84872f083417cdf7550a4a29c86e74ea75db627279e8297f2a151746861b867344154e21ae2580f3a90879d4f4eec56df4f65773b09eb0df180e13bb977aa717397d24241ad8dbabaca747765215c6152ba0fb234181db66fb4bd6203cc84d0047973cd888616a13a035b4315d335b9bc4073f54640ed99e13fa997bccdabdf1079936107397b44720f6e9c7809ab28ae2d7a9437c9251553281026d34651e3e65cb036e97d27d13cc896088b5b811763eef93d5019143193771abc500460922e43722782b9e0606ce955d7835368006d181eae461f20254ddc6aa5b6a92de3b3e207be662f46fbf493ff2eb1e598831525300d15c3c5dac4e2007f65124798c9434033ec54b6370b14b37c308f74d4c6d7bffb0698713bdeaa7875fd5da0b615510a5e6a4cbea10e2866ce7eb287633a57ae8e104ea24c95f772eae59d29d33fd4fcf28f096743eb430ae8c948a6fc9f68d68c9712cb59041077f406d25cb4d44dba6710392de9ec52eb88435253ca4db4172b62d1383ebd72c2d2b51e081e2a0f29236240a2c9d6261174a08588c6f3861e3ca9311b80686859ca7f9a7305af6d98bd6e8dd076dbeae54464168312a73fbf3a119083a537be12017f0119bb6cad02ba21a2ece845b6f349e443826011365ec2545ddbc97a45298bd31c75cfe2da7c36406a83289503b277dd02932f868afeb0b16462a4eb1021e7f1ef5d0738c500d18a70de41076aefbb3eb59386002e4f0befff672b752a79a67212643c3c501c79aeaf27f7a6076168c5c6a3aeda781a516cde891e48c355e0b2639692c92218746c95d810582cc4859d7d40efaa603362ad1096553e69d87bd58e6e6f4511595acd14f140aaa9b2147aee2004128b75e10593d01f8b3dc753e9fcb9870ba197320dbae072cf450f1221a175e86e8f87652d4e4e9349b761cbeb4af7fc5ec5c95fe937ecd64bdcdfbfebdcfbc6bfbe1fccd68c443f2b994ce911e9e6888b1a0d48c12731bea9930227d5b5bbd5fcdfa249fa0f3bce28ee4eaf168f2393d9a49765fcd0a24ed8e9e1a1957f4424fd5c6eb4ff6680d751a52a85bd2ee67a8c37c1e72dd9359e6d8219ac437206c1f5320351ea9fa271b822263fc09f48c1c97356d1c4cf5fd315ca02fdf9da13d1555bfe6299ced475d311ad1712f3aa5690e1378080b3d97db148f106c54be6abb7f92f2d37326f9cf258ab2997e5160a33eb9320b66347a169f1e5080b49623447040d5ff33e4fd0eb221eaf721aa435551de9df2ec335df47f20c45067060f3dfba2fa780b007766a412ff5b04a74b4bc6b81176e959139d754a02a139247976434516172b591f1e6c2d0e6914890cf1479263005037530921621903b64b4333da3466f19f966ef306c65b746ded4e5e5250305899dd812f43a63ef359f56161af7e0419717510ab632b3613b0984f491951add41d0dd5cc136ea8e9b41418dba4b71d277b17f6d5d808498ae5c2e726ef7ec25f3d787e728ab6b0a8342ff59f82836aa2ea099d9193e56d6196fa9f5abd2913ecd1cf7697886888b1aa52330e18f91e8e4e357c58dd330e3f622521f71b8cbb99e16737706e114e9df2b6b173982f6821f1d8fbccce398581b6f869f84637ebb0e1a36f5d84c8be47615c87fae6f6e55bdb7e27da29dd2bfa89c022915f72e9c3c59c05fa22ec7cd73f1391f15f0ce2e2705ead0a3afcf75b982028ca9bd8f1f7564f63b9a98d64ad4b14ca35a895b2cc3d623006e596a0b8cf4ebbfd5d5d5542afa6c3534407e8659bbc642746d8a3053d83122ca55054f392d9bb4dce357ca7983ed9ce696f19f3d36d044b2b062f069860f08f50d20fb7882cacca8c79333faa96f28005fa8594e69322a521041e7342fa5afd6775b829aa6d6d9fe8f8d327bd0ee71c3fadfeb565e93a7521a8690a54ef3480fa20b46ba0020af68a276bfc11a81c547a67f7355fde347517409b55840872c992c21d48927ed358b8f53bb527ef1a487cee092322e40dcfa83c6178ae38f090785649dd7206c5960e5efef09973494c594a4970a8f48ba23442565ceabf5b3b84e585eb289fb6c0aa91085926ea653c189b8dbbf1bb64991b61c835dc434e15db848496579e7a2c044698af0f9b56bf27a9e707bece8ca7a047c56043170d77664352ed1ce7083aef684f9c5e51208766a8019e181c400e92d45c97f0a74d35eb77c82e8ce06e4bed9e068f4deb6a21f179e5c5f2cb50870ee37ad2c6098a0956617ee38224e18505616ca840d419aea39669122f0bdf1d1ded12549ccdaa5a4765c1bf5da52253c6df8c86182aab57ffa31a688fb8edafad974ee704087de45cb3f2ed08470523f3e9afc8de027b0d80537a4178880e55dc13a825bec580ae2dda5fa01dc24ecaf8bc29434824d088f90117f43fa504de8f2cdd4d2615dc267f5779aba5cafb972eefec47c4222fc94cc38378a1da035ef012b30a2212b72365ae1d34a46bb3bac0f712b9d93ba0c2ee99dbe5f2ef895112f9a2741d2765808c439470d7e16fdc2a8a0b8afc59013053e32a91f0bed85747c25abfeafb5b5b846e0399be30d6ebd784dba2d76450e6c350251343572606e1905a43e17df24fb8a222a514bec8bdd454261a79995cde014ed70a9ff65c385db8669a2b52f0bf0ef88a0bebda499d428a94aa83768c13b95169a51c51e05d69f5e614e708b9fc3a0f5aa2852c836a28e0c6e98e069883eed258d9702afc2638026ce2b3390fe273487d14bed617e75ebf4b5534a5d1b05c2c9fb5995837707361c67e227cb5dab9bd6cb8064a9b9ef5fb18fef5426a568e769cd979ea4002e7ba45704036fbc28b6a0c15e77532bc443bc7eaf94c5b34117ec13028b23b5be7327fc0f2d9dc192928675decb87597a011ea3be76663cecac5c44d755393a42e80e6f64a57948615d9ce4321b78f72e8401b71aa503773e7021a055522d9f24dafbaa7f6257a3c7b57e68ca1bd733a5d7a3f59df482d29f9afa9e173916668f599c479217700c321643be3e198213b909d54c4eb5bea67670086a2183be8dc71af229551d0bc779b818fe6958aadcdfb60752400512abb661fd55d6de5b3825d93b39ce3080ffee55db5db0e51aff18794babdb6ccd7a388dc5a9c108df325d46113d822def029262ddbfd5acbbc0e4ffff7dea8cdd4b57dd415fc60e3ea492644e22cf77326c70a715395107f1e43fc87831372cb347c1605ab849df5cb0edfec5186a079ea891e611eef02677d24181075b7e5c362d52a311ca6f2f196f4c47d6f1041b38ce32634617a1860eac2841ac8ab187a10d1599952602d35067f85ab5a4d846183ad11f446ce6108edaae9606993e396e858c6473dd96c3b0e9623ffee5c8144c8a96d9e1071d2e37d90f30124b0d232b754a64bf62ca2c9ff690dfb5d4fc036a77ed56aaa44e2ef17b0514d4209f9a2b77fd7b094c33dbb818f6e45b46691f290e35d98c4ea0c369387e673be2d364fe6113dcc6855c15a9a0db9fe3ee600b78bd69c02d836765a2b35b0791b975eaef2b97a8fc2f84f4b2915f42614dee762ca0eb4c876ab28f45e0329fd2e60239ff715a9635ac3c00ca54656597a364c72adb7b4931a5a6ab5ed19ce1b41863c823a46a5be16b83739d7f085ee8ea8349b9e1c8296f912e19e809cffdd7c5452bc1a1b59b30deb645863c28cd99b18e2043cac4b65af39d55fe15abb5d964399ef95a51bd3346f709c64d4dd69215c7dcfb011813d952a91d1c2bea81e3bd5c2f513837f31db85d56687ac11d9f77f0866c8cd3e748f27e4323cd7b9296cf79007aa8e80ef6fff67cce165601bf5382f63ef32c7be3d4680a0e5df09adaf93becf2c8a83077a488b729f9921aafcdfa43703078569b049edf2963a9b0ec31a31fb1ee2e722b4e0725f26ace4e30e6d780b268e3afa765872ed191486795a1530121e302e8a15e490dc76aba6ed9a1178338eec635f4e5925700e3ceb01073103242626840f2f2ae85debc18ad1f364652cab606481ab7173e34817f07dbd376609411bf0a8836a06dbd7b6e1d20a63c78973248cbd482e5a72ac605a0ffd0de4268052a1e6ea4d3fa05ec1470ce446cd7468a4163ab236c6fdb07ce55311171fd094da429dd4982c38d6872c173e7d995fd839c7e0bbe3f6b0391bb6ea851ff91948126680e4ac5cfaa1c2830376f16923a4cc82c7bdd0f85567cad5c9bfe8df17ccb57a0597a9718f4719def80a20e877789a28a3894d2c0903929a565bcf125b9bb9538b965303dd6b9425e85e9350d969e44d8167a7df8a1f87ea26ecf8102f8afe4ecfcda414047c875a3adffc17c0f57bc8f374221b24646d2f550ac0615e54bca8cbb51fa3cf7dc83b19f717e88efab2396c45a5750393ac3a9679421367d625f02779faccad094c4e055ca49a301805d46743ac5e54ef01b400323e03be9f1c87d771083b0fb8f2b9c446498081de44e5bc3145031cca2cdc889310c907cb1e522cf2f970aeee465b73fb45a2bdfd27614bb0c626acd5c664986b8129a36b31ecd5cc104c5a82b5e54203672425b5838815caba0c3e456d20195700d0fec8c09fb7273e6d6d2a353407163da89f294de31f30398b443dff380acddd25fc0ae7cbf4395eb3b3a5256c91d56425db28da2de2a37a8540b524cd82efee9b0b67ead3bd7", 0x1000}, {&(0x7f0000005c80)="0ff7fa3ef6f1c6c0f6252bc8c164e5509d3863509de9ebb345b8873333c0f94bacd86081c34bf076465ea265915931249fa08d6fe2439030771d1e4fe5cb804aba0788f3903e15d39f6112", 0x4b}, {&(0x7f0000005d00)="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", 0xff}, {&(0x7f0000005e00)="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", 0x1000}, {&(0x7f0000006e00)="05410cf1ab156a5d23717984019dd3285a599feed0e5115330a80e97f114a97b72091ae0db6f3049f06ebdbc7ce7b13c0a2f4a3c0e21a47db6bdfe8e2ce07581abe7cdcd9e362e58129e0e87b76fed30c52ed7a372bcc55356c533a0b54e02bf4c6545088896f718235b3b1204c7653e997e9ddfc1cecf22520dc8ce42ef372b3b67df48723d6be4bb2b09ab09f55f96d8334452", 0x94}, {&(0x7f0000006ec0)="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", 0xfe}, {&(0x7f0000006fc0)="0735d74a1e69e04b4c66d3080adb41feba5c5bc9db924cb127c89041f17b986cee525c0e603d97cfa32ba14e9b87ab3f24e8fd7cbfcd7a80bb7c191542a192ecbbd65ccece9364bd624f48889741d52ce6151a3e9607af7a556e6357195daec3e51347cd9db8288d59b702e2c42d8197ce080d41dac150daab9487701cebcc380387b57d4328dbd0672832fd0c23bfb08a90faf3fd050786b3f67844274a1d7a6514aa7ce6707859059a78cc66425d", 0xaf}], 0x9, &(0x7f0000007140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xab}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}], 0x50}}], 0x3, 0x40) write(r4, &(0x7f0000007280)="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", 0x1000) write$binfmt_elf32(r0, &(0x7f0000008280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x99, 0x5, 0x1, 0xfffffffffffffffa, 0x2, 0x3, 0x7fffffff, 0x309, 0x38, 0x26b, 0x1, 0x2, 0x20, 0x1, 0x400, 0x20, 0x100}, [{0x60000000, 0x9, 0x9, 0x9, 0x2, 0xffff, 0xfffffff8, 0x2}, {0x60000000, 0x10001, 0x800, 0x4, 0x7, 0x1, 0x9, 0x3632}], "6bee26fefdc32602284ace67c04aa191006bccf5c21cdbbc28784ea3804a8884703158cbc4d8d18067bf52dca3cd8ec092de2c8dea4dcb899c294e4de3c5cd07408c7e54ef0602b60d0650341fb30eb35d34952c0a5380348fe681089cf46e3a521253593144e6bf", ['\x00']}, 0x1e0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000084c0), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000008600)={&(0x7f0000008480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000085c0)={&(0x7f0000008500)={0x88, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x88}}, 0x90) close(r2) 18:19:31 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000000)="f5d640663ee971389beaa1e56db2f8029c29f7f86e6ba0886b0cfc1c0134d6106a62a3c9686d8fa8c0d6df994f5308502e845d0b1331d08a00194b795bc3df8e157ca653135d4e8cc2d20fc7bff233f718ceec04637c8c747d8e8264ffa8cf0e455faacb08168b9c04911373c1d0bc8207740ee28a0c44afa54a0c6a99c0633a6a57e3366215f1ac5953c74a2e0502bbfec9004b474e426d076331b423eaf337eeec349bb1237d0fb017a6d0c5614a8c33970094a1f658991b81e6f3046f272688b59bc2e1c17e8429", 0xc9, 0x80, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) fcntl$getflags(r0, 0x3) r1 = openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x4000, 0x100) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) [ 71.449153] audit: type=1400 audit(1672078772.013:6): avc: denied { execmem } for pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 r2 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x9, 0x7, &(0x7f0000002440)=[{&(0x7f0000000240)="f417e106ed8aea7d6602afeb86cde17b1e53a34199a14e57c89b709ea7aaa5c5d7c65cdd54bba0d0079e2160f6dd1ac8b4287e1bf6e16c6d95f03d63d6d486b1d70ca992ebf143157eebc738e13b118fb82c9a0da1c600dc39670efa90c9e6a324548f7d7e42097a2fe01654a4224233ac85da7837203060fb4a46fad0d407862cf3e9e5d83aea046430a551989eed47036e059ff189246b501f576025d57cda81f28860e5b916d45a8c442181d0a4d8aa6436634a6bfd7dbd540ac237cd48679afe9b9f056b77eab34ffc8d9668", 0xce, 0x2}, {&(0x7f0000000340)="43aa1c80fa2d9dcdba6a5ee6f39057f040e3", 0x12, 0x1}, {&(0x7f0000000380)="471f03fe101e65e692822cdfa5313abb5eb1e2369f17f62631f96f33e28af9d814c0aa41d4cf189b0f0a2bf997d00785b184b8", 0x33, 0xdad0}, {&(0x7f00000003c0)="fd8196f2b1bb01684eba567f2a6c61323e93", 0x12, 0x7ff}, {&(0x7f0000000400)="56dece8c2704bc4139aad9a8d289e35faeb60756d435fe3d4565c997fcb16a", 0x1f, 0x1}, {&(0x7f0000000440)="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", 0x1000, 0x4}, {&(0x7f0000001440)="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", 0x1000, 0x4}], 0x4, &(0x7f0000002500)={[{'.log\x00'}, {'.log\x00'}, {'.log\x00'}, {'.log\x00'}, {'.log\x00'}, {'.log\x00'}, {',+{]-'}, {}, {'\r'}], [{@measure}]}) close_range(r1, r2, 0x2) r3 = perf_event_open(&(0x7f0000002580)={0x3, 0x80, 0x4, 0x7, 0x8, 0x1, 0x0, 0x48, 0x50240, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xac, 0x0, @perf_bp={&(0x7f0000002540), 0x8}, 0x2242, 0x100000000, 0xb7, 0x0, 0x0, 0xfffffc00, 0x6, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x1) dup2(r2, r3) r4 = syz_mount_image$iso9660(&(0x7f0000002600), &(0x7f0000002640)='./file0\x00', 0xd501, 0x5, &(0x7f0000002a40)=[{&(0x7f0000002680)="99b7964381d05cab1999dac56dddf0483d748d210c9078c0363ff74abcc8e4bdbaf0b1f319eef8c80e97977da10faff9a7f3f2b1d8f26b5272277557799c5a69fdc7d54c753a190583b4050f5ec57a9399ce5e923ea876bd3767430abb31e2f5f813921a778d9f864176cec24fb2bded3a29c69bc89e4dea2a0cb0b3256333a9aa23af76117eb862aae55b25069edd1e257bc82e431f9e020869f4a2614c34b9d4fdbd01f0b1b78f31edd60b64a0f19567971ca4416b53b33322921959d1b72c7278a546b11932c3b5b6ee39", 0xcc, 0xaacf}, {&(0x7f0000002780)="0ecaf68faf45e9ae5f2c306542ac1eaecc057f45e61297e0bcfc066ec4039a7e4951e4bb237273d1f71fccb451626ddce294af02dea00e71f883ceb7ba4593b15edfe26be6874ed1602ae82e6cdbfee0c4f603869a288dc52bb23367d4dfd9771a0f0732845fb429322cb75fd9e05438b317cbd878b5d44f1677143352ab0bd6b8046f52efdd594b61ca3af2616488213b23017e17e8b8177fb40f1a9d01", 0x9e, 0x9}, {&(0x7f0000002840)="58de44f07df8b9724e9ff43a0195de7f7be0308f8b8815fd6f86bdb9a0b5ebf2c0fb2998bfbe74aeb5acdee533f6f4ec6d186b4d6828881a465c2f62d479c58358557b1b1ccc6724e730e989fec13bdfa847029292f43734b9d83684df2808da32c6d39563d0e033141d8ec7b9a49a519015e169890e8fbd8f37bd31a28d49d5306baf62154b08b57b7a4a719615863b8732e2826a6197d8cc717b4f9b", 0x9d, 0x4}, {&(0x7f0000002900)="974aa7bfc63efe9aae417272ce8786b10b32bb1dddfc6089891ceeb79addd29f2527a2a22564cce0588f9e138f738fb0f59d7b6d3088830af801c0d309a5a0e9cd0d58b52207b7f051df34bfcccda288d5585cfef2dd48577a1a4c3be0cd76d2706602348cfaaa773ae1d6c5ac08d8ece470a99265b9f1676176ec571b", 0x7d, 0x6}, {&(0x7f0000002980)="37888c416ea5c54ab73b8fc2661d50b2562c69154c7700b01d4f0e6460fb4200a8e6e371d8a23c15361643b544e2672fc3351a1496ae756042dbf1acb6426b48b2713ae16a3a4d0e7910e5f8112bff2453b2209730ae46fb9ec4ceb5674610806e47c6ee1f7999ad75220017f932ef4a21ce2d7d94292ee00c3f5e54fb0fa849f2fe35310589044c0717", 0x8a, 0x3f}], 0x0, &(0x7f0000002ac0)={[{@mode={'mode', 0x3d, 0x100000001}}], [{@appraise}, {@obj_type={'obj_type', 0x3d, ']:]\xeb]^\x10$'}}, {@fowner_gt}, {@measure}, {@smackfshat={'smackfshat', 0x3d, 'measure'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!.}+*('}}]}) r5 = syz_mount_image$ext4(&(0x7f0000002b40)='ext4\x00', &(0x7f0000002b80)='./file0\x00', 0x8, 0x2, &(0x7f0000002d40)=[{&(0x7f0000002bc0)="6d653579d63a05a3434989e69d6d093239efa22b6becc0428ab380950e4091b1c095a2a3039c5afd597fb53b77688c17ca8ee96935cfc3737b9843e111882dc9fc3f95f37b06c0aefe55b6ceb76f1ba9742ef141726b7c35cb3fdacf702bdb96552d0e0aa2a8a4b685dab4d03297548d249ab314091237deef6156dc9ea9", 0x7e, 0x3}, {&(0x7f0000002c40)="3d1de46157d77a0b582c3fd009d7280ed1f14932436121288314590e643713daac5e7ad220ba0d9c2c066d2b8f81cd3ee670c1712e039ef9bd6bf351a4336cffdcb019ae4a6720861544324c503a4368e2d5101482bb50555b06e3435747c31ff8366e5f458edb476f14d8452f9344944f39fe2d22a2345d5c2b5c4ab94f529a451e50a8796146dae46e491c80f4a9098630a21fb079126aa8660af30df847cc54bace9a3fd6884dfe9270e580616f458c72b35958719384cfe2a763056fb7df073f2a76b0253e8c88c30e9fc1ec9dcb67eb305790ba6fc01fd09296cb49c78aa0c1dd0a5576635bb199815b9fe4499a65", 0xf1, 0x200}], 0x2280000, &(0x7f0000002d80)={[{@grpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@nomblk_io_submit}], [{@measure}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fowner_lt={'fowner<', 0xee00}}, {@permit_directio}, {@dont_measure}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@appraise_type}]}) ioctl$FICLONE(r4, 0x40049409, r5) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003440), 0x0, 0x0) getsockname$unix(r6, &(0x7f0000003480)=@abs, &(0x7f0000003500)=0x6e) r7 = accept$unix(r6, &(0x7f0000003540), &(0x7f00000035c0)=0x6e) r8 = dup2(r7, r4) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000003600)={{0x0, 0x1}, 0x100, './file0\x00'}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000003740)={0x1, 0x4, 0x4}) syz_mount_image$tmpfs(&(0x7f0000003780), &(0x7f00000037c0)='./file1\x00', 0x80, 0xa, &(0x7f0000005c40)=[{&(0x7f0000003800)="91554435c32ae45cd8ce15b0080d166558be295346073074d53bc2d8d10b2e79e17758ddca520a8138f7b5b44be24b918beb85a4ed625a16fe43e8e6f4626941bd74a848c65faf5a783eedd2e6e1eecb64d11bc6edd97f7d3aedae0e07558054025fd27cb1c96208a671be1d95f153738f4b66ff37a0437c", 0x78, 0x4}, {&(0x7f0000003880)="642ec7a50582c2814f673c3859d3d23d1828ce3af40051c1e17e020b9289fb373ae173768d7a447a7738546b4b930711281a7f9e3d9ae070f41fa33a0b1d44bc43d05c", 0x43, 0x9}, {&(0x7f0000003900)="cacaf79c08a2d9763358eb69b6b69f92b708a79d8399fda36f3c1a382bf6d337706f38e9c9175e4c4ee0e28467a6b932180e6b1c5f6b852413cf1a03bb157fc9e6234ed70f2b981bc5b3a1", 0x4b, 0x7}, {&(0x7f0000003980), 0x0, 0x9}, {&(0x7f00000039c0)="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", 0x1000, 0x800}, {&(0x7f00000049c0)="9002f608f431aa20b2b335cba5029a891e084c49d2cfd2af461cefe2568dbe826a76e0baefd0ff876528d6cde62f3930478c7f7c95743842efc6dcb3443b7c1bb055557e0df5d747fde964c4feb380800c55ff781600880b7a8fda993b52e08da7a570854f7635", 0x67, 0x4}, {&(0x7f0000004a40)="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", 0x1000, 0x8}, {&(0x7f0000005a40)="aad57f9f6f719ee08bd7cd3266c527e6279d58823fcad183d79ba0aa40547de59dac321ff76e1b2b1b0738e804109cbc6fb5c7b7411632fa6c6f6168f313456698ac9775ca93b4c21127e7a6c82a5b59c28281ac145c44e51929961c687e558c042a7dbd35b101d7617fb8f170822101303109b9452c3faa50ab80c45668a1577be80550d962c5621026a37ac840a5ea406daaef8c550d818d0aa4e138ee35459b593faa31852ecfee8491e67bacb6", 0xaf, 0x14000000}, {&(0x7f0000005b00)="649d3aae4fc43886aa3e87dc4dfb4727520cc83162edd00a03867f2418e37b1f7e9364686b8195f094458c3039681c1ebeea452d6b1dc26cb7617a8eed36bef350546d6b2830d06ae37b0577ffaf602dcbee79b39f299a122632fa07487463389297cc38b7f1774db2da3c33b405c95766ab233c796580f0f7509b99247a5e2d5ffb10c20cb1ba53b4a0f2ac925f81f6e8e00578f862ea7ed93bb64ec7b26247801d92b5e70fb56e72d652c52d204bca958d4a91dda15818b9dc92a84421eeb349da384a82c798", 0xc7, 0x1ff}, {&(0x7f0000005c00)="07f2b592291b3711359f8cf78f517ed4f4244b99459ae93d9d1829206bdecddb5351f00bbb54e000b0243c41008c6a6f", 0x30, 0x9}], 0x800, &(0x7f0000005d40)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt}]}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000005d80)={0xf0142ad70b583222, 'erspan0\x00', 0x4}, 0x18) 18:19:32 executing program 7: ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0xffffffffffffff95) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x4, 0x3, 0x2, 0x2, 0x5}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x56]}, 0x8) ioctl$CDROMEJECT(r0, 0x5309) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3a30, 0x4, 0x64d0}) ioctl$CDROMEJECT(r1, 0x5309) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x81, 0x180) r3 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r0, r3, r1, r1, r0, r0], 0x6) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x5c1000, 0x0) ioctl$CDROMREADTOCHDR(r4, 0x5305, &(0x7f00000001c0)={0x3, 0x6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="a932742b4f1c9f7917a86effc3f0ec94fd1aaa0f91334a681d3801985e6aa5a9ea701359199f64987036d07c2c1e5e0e4e6e71ba634256501dcbe59893d45f6b118da5a5c9acebe9cd6f56e37d473a", 0x4f}, {&(0x7f0000000300)="4ecc15e1daa067fd7c66d2b6b54074c594df270baff9c6f9e7d67162855cde8bf0f4ab8b639c68c9d6dbf9e8c741c7b8afc23c8cd3cdfe6a4d6d5b3b98133db3d258757a5bb5d759676c31c3db8aa0b6d763aa9d6ff98fb0ed8320bdd7edc8332fcb4b82bd79da03b14b8c88ead0fb4bccfc6685c3ea767a92f1f1ae5dfda2e88e5648d5731be47c37ffed9f1d3c9b4753b6f03541125dce4c58ae35f6e7131cc223018a19680fceafb7dea6b80f9e2f03ac", 0xb2}], 0x3) splice(0xffffffffffffffff, &(0x7f0000000400)=0x200, r1, &(0x7f0000000440)=0x9, 0x6, 0x1) ioctl$CDROMEJECT(r1, 0x5309) r6 = creat(&(0x7f0000000480)='./file0\x00', 0xc8) ioctl$CDROMPLAYMSF(r6, 0x5303, &(0x7f00000004c0)={0x8, 0x40, 0x5, 0xf1, 0x3, 0x6}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x101100, 0x0) ioctl$CDROM_SET_OPTIONS(r7, 0x5320, 0x4) fchdir(0xffffffffffffffff) 18:19:32 executing program 4: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/241) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x3, 0x0, 0x40) semop(r0, &(0x7f0000000100)=[{0x2, 0x7fff, 0xc00}, {0x4, 0x81, 0x1000}, {0x0, 0x5, 0x1000}, {0x3, 0x7ff, 0x800}, {0x0, 0x8, 0x1000}], 0x5) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = semget(0x1, 0x4, 0x0) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000140)) semop(r0, &(0x7f0000000180)=[{0x4, 0x200}, {0x3, 0x2}, {0x0, 0x2, 0x1000}, {0x0, 0x7fff, 0x1000}, {0x4, 0x4, 0x1000}, {0x4, 0x800, 0x1000}], 0x6) r2 = semget$private(0x0, 0x1, 0x320) r3 = semget$private(0x0, 0x0, 0x4bf) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f00000001c0)=""/104) r4 = semget(0x0, 0x4, 0x20) semtimedop(r4, &(0x7f0000000240)=[{0x2, 0x0, 0x800}, {0x3, 0x401, 0x800}, {0x4, 0x8, 0x1000}, {0x4, 0x5, 0x1800}, {0x3, 0x3f1, 0x1000}], 0x5, &(0x7f0000000280)) semctl$SEM_INFO(0xffffffffffffffff, 0x4, 0x13, &(0x7f00000002c0)=""/33) r5 = semget(0x3, 0x4, 0x473) semctl$IPC_RMID(r5, 0x0, 0x0) semop(r2, &(0x7f0000000300)=[{0x2, 0x2, 0x1800}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f0000000340), 0x0) 18:19:32 executing program 5: r0 = msgget(0x2, 0x44a) msgsnd(r0, &(0x7f0000000000)={0x2, "de14ac391cd76bc66837af6346a39dab866502dfa1af788d7b4dd9ac9181cab7637eb8bbc8ca8b4ea1bd2272cf0d24e0fe91cdf58eb1be4e5bb4bca2750f3e0b70ed5dd72fa25633f4389b7df2999d936501fcae43b09db89b2056f92b5213e2e9f8fd95be03fb1e3255d2e6ef08c7e2618cc4ed9cd7c74a807ce4c6ad4f488b98ba591d4f7add5ae36c1759054e463484a295afa6ca90"}, 0x9f, 0x0) r1 = msgget$private(0x0, 0x400) msgrcv(r1, &(0x7f00000000c0), 0x8, 0x2, 0x0) msgsnd(r0, &(0x7f0000000100)={0x2, "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"}, 0x1008, 0x0) r2 = msgget(0x2, 0x0) msgrcv(r2, &(0x7f0000001140)={0x0, ""/151}, 0x9f, 0x1, 0x2000) msgctl$IPC_RMID(r2, 0x0) msgrcv(r1, &(0x7f0000001200)={0x0, ""/4096}, 0x1008, 0x2, 0x3000) r3 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000002240)=""/51) r4 = msgget(0x1, 0x0) msgrcv(r4, &(0x7f0000002280)={0x0, ""/177}, 0xb9, 0x2, 0x1000) msgsnd(r0, &(0x7f0000002340)={0x3, "02dd5eca772b9fa425fdbd48f52257b8f306199e442c6a2ab2c8e7c80019030887f86b0b15164ef18c70a4c534418cedecc7a12299c5afac9312"}, 0x42, 0x0) msgsnd(r0, &(0x7f00000023c0)={0x0, "ffc821d5ba23cc5607f86d2b5c32d7b494a5326ee473da95b51c7b13d18e165b089ab70cc2248aa84b788da1f62bfd5b4d2f558df1c5dc4b4038ab4df16650f248b2f88b6480a81cce8108340e9210ece67750c35f3a85acf8f3d560f3d479fce7b45bd78ff41f3c8eb5a938a874b146ff6838bebe955a2b39ee2fb935a138bbfd5268b10d03b9fa73c8ae6f365cdb254c83b3f4"}, 0x9c, 0x0) msgrcv(r4, &(0x7f0000002480)={0x0, ""/91}, 0x63, 0x2, 0x2000) msgsnd(r1, &(0x7f0000002500)={0x0, "5878ceb97e368234071d46b0e7618ea4c35f12119eefacfcb760325b52e13ffa3d07f6d6b26a5d028861bf34375abba5bb21ae727c8977b0aea33167f4f09c0f51fa62b955d658ae3c1c456e6f517e13af2d7295e5520623bf0b608bb59d8447599da70010deeb534fe993d6ec38573d458a1f7b17d9181f"}, 0x80, 0x0) r5 = msgget$private(0x0, 0x340) msgsnd(r5, &(0x7f0000002580)={0x0, "be660cd9ea036056d93c8656c3070fbf7c975b14849cb9d9c30b06535358e9a83e2339251da5308ad2c8323b635fa59382dab64620ece450b501d1ddf5199c2251b2919ddae213fa6e299c54f6b8a2122eff6e342b3d0a1c029d8265bb850cb2577e94dc46609ed8a49b97d2d59d280e3d9a4a713d0cf7126e7751b5092f9c9006a48bcf1db2cfe0a2b5258ab102bb801b0b3a292b4c1b8f6a863267af0107c381cde8373512727593e0eb2bee25c46f0fc61bd2783c51fb658cdc868cfd3f181f4e834de1"}, 0xcd, 0x0) msgctl$IPC_RMID(r2, 0x0) 18:19:32 executing program 6: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$packet(r0, &(0x7f0000000000)={0x11, 0xf7, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x8010, r0, 0x2c4ed000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = signalfd(r0, &(0x7f0000000140)={[0x1]}, 0x8) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r0}, 0x4, 0x9, 0x10000}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0xab, 0x6, @multicast}, 0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r4, r2, 0x0) connect$packet(r0, &(0x7f0000000200)={0x11, 0xf4, 0x0, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) r5 = pidfd_open(0x0, 0x0) sendmsg(r1, 0xfffffffffffffffd, 0x2004000) r6 = signalfd4(r5, &(0x7f0000000240)={[0x4]}, 0x8, 0x800) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x2, 0x6, 0x0, 0x9, 0x200}) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e23, @remote}, 0x10) [ 74.703173] Bluetooth: hci0: command 0x0409 tx timeout [ 74.766694] Bluetooth: hci1: command 0x0409 tx timeout [ 74.767366] Bluetooth: hci2: command 0x0409 tx timeout [ 74.830668] Bluetooth: hci3: command 0x0409 tx timeout [ 74.894677] Bluetooth: hci6: command 0x0409 tx timeout [ 74.895372] Bluetooth: hci5: command 0x0409 tx timeout [ 74.895715] Bluetooth: hci7: command 0x0409 tx timeout [ 74.896614] Bluetooth: hci4: command 0x0409 tx timeout [ 76.750693] Bluetooth: hci0: command 0x041b tx timeout [ 76.814690] Bluetooth: hci2: command 0x041b tx timeout [ 76.815363] Bluetooth: hci1: command 0x041b tx timeout [ 76.878751] Bluetooth: hci3: command 0x041b tx timeout [ 76.942698] Bluetooth: hci4: command 0x041b tx timeout [ 76.943389] Bluetooth: hci7: command 0x041b tx timeout [ 76.944029] Bluetooth: hci5: command 0x041b tx timeout [ 76.944670] Bluetooth: hci6: command 0x041b tx timeout [ 78.798746] Bluetooth: hci0: command 0x040f tx timeout [ 78.862736] Bluetooth: hci1: command 0x040f tx timeout [ 78.863482] Bluetooth: hci2: command 0x040f tx timeout [ 78.926683] Bluetooth: hci3: command 0x040f tx timeout [ 78.990742] Bluetooth: hci6: command 0x040f tx timeout [ 78.991490] Bluetooth: hci5: command 0x040f tx timeout [ 78.992184] Bluetooth: hci7: command 0x040f tx timeout [ 78.993143] Bluetooth: hci4: command 0x040f tx timeout [ 80.846728] Bluetooth: hci0: command 0x0419 tx timeout [ 80.911637] Bluetooth: hci2: command 0x0419 tx timeout [ 80.913315] Bluetooth: hci1: command 0x0419 tx timeout [ 80.974802] Bluetooth: hci3: command 0x0419 tx timeout [ 81.038793] Bluetooth: hci4: command 0x0419 tx timeout [ 81.039979] Bluetooth: hci7: command 0x0419 tx timeout [ 81.041118] Bluetooth: hci5: command 0x0419 tx timeout [ 81.042904] Bluetooth: hci6: command 0x0419 tx timeout [ 90.553366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.554420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.556183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.715227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.716155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.717591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.878271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.879238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.880556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.993735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.994923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.996183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.120780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.122047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.123307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 18:19:51 executing program 6: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 91.173527] mmap: syz-executor.6 (3827) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 18:19:51 executing program 6: r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x7, 0xe, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 91.242988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.243857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.245024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.257629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.258598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.259674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 18:19:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mkdirat(r2, &(0x7f0000000000)='./file1\x00', 0x18) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000, 0x0, 0x2}]) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) dup(r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) [ 91.332585] audit: type=1400 audit(1672078791.903:7): avc: denied { open } for pid=3858 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:19:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x24e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_complete(r3) [ 91.384185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.385089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.386883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.401308] audit: type=1400 audit(1672078791.972:8): avc: denied { kernel } for pid=3852 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:19:52 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:19:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000600)=@isdn={0x22, 0x9, 0x2, 0x40, 0x98}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)="62b5152634c8ac21747d905f28f815734c4d700108ebb44a6bdb40d8628dfc97966c9eab6bc1d494daed10111bff695495a7f28a7027b4083820f7a690f499ff9735ebe885f214161db505a961c2fb5ecc1c28c122fd086f97e12eb8004e7084d510650d6cca95d4cf1b16284e17a3a760f75b124725c5eb06fe1f7c511f9ec892a651f2a0dd6681a3e98ae7a79328352c51150b923743809d925ac4767f82d3e6e141a7540a431f2b585eb55bece78da0e393f8d06058eb945906344e0f2348fd78ab74a071b1d16b023fb1d374448e4833af795877a1", 0xd7}], 0x1}, 0x4000004) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x102) ioctl$SNAPSHOT_FREE(r2, 0x3305) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2e2f661f3b19bf00"], &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='autofs\x00', 0x362801, &(0x7f0000000240)='.\x00') mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0600, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e8, 0x3b, 0x10, 0x70bd25, 0x25dfdbff, {0x1b}, [@nested={0x121, 0x7f, 0x0, 0x1, [@generic="dccd32ac50b3ef0decd101596c2b7affe5d8b4aab9550bebd8b69c7e9591ff5680b9ff4b04cfc7dae09b636613dafa2fc3a046f1489eaedb193b407393ebd7fe125b8c7ce2bd2276ee1ed0c4f6dd5dde8dff444b93e955acc94fc33109abecdc8895a5a6ce143ffb3ab5ad464de67c10a9d0c27682839e7871bd33b3311406721c65c0b6b5acab9950b6cc7f36376d34c88618d776ebead551d72639eaed0791a11015093c509ccf18acbaf11eb9a8165571352991b828cfdb2c78d027c7abe363f6b20896ac922119c0d93ea57800b7c0394537858f25efd0b0b0f7c3c306bb398d59426086a34f708faf", @generic, @typed={0x8, 0x9, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=r6}, @generic="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab7"]}, @generic="3e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e231287ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b7f87513447e6612e292557aa01"]}, 0x1e8}}, 0x4008040) [ 91.494732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.495614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.502411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.504396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.505262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.506600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.614855] Restarting kernel threads ... [ 91.615404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.616804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.618259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.635427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.635771] done. [ 91.636300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.636671] hrtimer: interrupt took 38603 ns [ 91.637759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:19:52 executing program 7: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r1, 0x40a) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1, 0x0, 0x6c}}}, 0xe8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000100)=[@decrefs, @enter_looper, @register_looper, @acquire={0x40046305, 0x2}], 0x4b, 0x0, &(0x7f0000000280)="12f4e29d542ef5663bee0596add95d315941300ae88589691e6aaaee525134ac393e2be1c0e0381d63535b6e1e550d514471a654db25f857b225920516811027101de40b0ef1c335d39473"}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/42, 0x2a}], 0x1, 0xa77, 0x800) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) unlink(&(0x7f0000000000)='\x00') [ 91.674098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.674933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.676196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:19:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x1f, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10002, 0x0, "56a05bf357d02c964565d12c982188953a9861"}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000100)) [ 91.706587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.707458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.708906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.051478] nfs4: Unknown parameter '.log' [ 92.099277] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 92.114256] nfs4: Unknown parameter '.log' [ 92.124756] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 92.228995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.229865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.231209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.288197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.289062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.290693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.948671] kmemleak: 26 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:20:18 executing program 7: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r1, 0x40a) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1, 0x0, 0x6c}}}, 0xe8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000100)=[@decrefs, @enter_looper, @register_looper, @acquire={0x40046305, 0x2}], 0x4b, 0x0, &(0x7f0000000280)="12f4e29d542ef5663bee0596add95d315941300ae88589691e6aaaee525134ac393e2be1c0e0381d63535b6e1e550d514471a654db25f857b225920516811027101de40b0ef1c335d39473"}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/42, 0x2a}], 0x1, 0xa77, 0x800) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) unlink(&(0x7f0000000000)='\x00') 18:20:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x81000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) recvmmsg$unix(r1, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/112, 0x70}, {0xfffffffffffffffe}, {&(0x7f0000000300)=""/173, 0xad}], 0x3, &(0x7f0000000400)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x80}}], 0x1, 0x40000000, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x5, 0x40, 0x6, 0x3f, 0x0, 0x70f, 0x20000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffff, 0x80000001}, 0x73717665194d1dd7, 0x100, 0xffff, 0x9, 0x8, 0x1, 0x20, 0x0, 0x7, 0x0, 0x2}, r5, 0xb, r0, 0x1) r6 = dup(r3) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000540)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x9}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000580)="d3f46668e30e13bd2c92690bc2b8f4fc0bab6aca9e9dc4dbf7ab2ca39bf8c1747b17c978de003421cbc530511b017db92756240140aae6cc2d28a7ad70df2d02ad8d365e9e356ba45ae6a030eacffa71beedfb8f7c649b0503606109a439f2d05e74115adac19b6700b73d51f7a79d41dd5a55672fc862fd6c547f1376c7f464d7295eb8c3290f59b413c22cf8d71c6456a9710d87a6e0c689d743b8dea8dc6eda70f41ec3e9ef24dd77bf262d9127c138a75530a12d00040a71278c7a18fd68dde45454467c769a5456a0939228a5ba5b0a017e79bf685b804e93c045100ab278dba44138d709c81e7c626075ad5f3656", 0xf1}, {&(0x7f0000000680)="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", 0x1000}], 0x2, &(0x7f00000016c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}}], 0x1, 0x24004844) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r8}) socketpair(0x5, 0xde96fb0227c7b19f, 0x1f, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="0269ace30e42a61524dfa8d7998917f4", 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000004c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffff9) 18:20:18 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000600)=@isdn={0x22, 0x9, 0x2, 0x40, 0x98}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)="62b5152634c8ac21747d905f28f815734c4d700108ebb44a6bdb40d8628dfc97966c9eab6bc1d494daed10111bff695495a7f28a7027b4083820f7a690f499ff9735ebe885f214161db505a961c2fb5ecc1c28c122fd086f97e12eb8004e7084d510650d6cca95d4cf1b16284e17a3a760f75b124725c5eb06fe1f7c511f9ec892a651f2a0dd6681a3e98ae7a79328352c51150b923743809d925ac4767f82d3e6e141a7540a431f2b585eb55bece78da0e393f8d06058eb945906344e0f2348fd78ab74a071b1d16b023fb1d374448e4833af795877a1", 0xd7}], 0x1}, 0x4000004) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x102) ioctl$SNAPSHOT_FREE(r2, 0x3305) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x10001}}, './file0\x00'}) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2e2f661f3b19bf00"], &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='autofs\x00', 0x362801, &(0x7f0000000240)='.\x00') mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0600, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1e8, 0x3b, 0x10, 0x70bd25, 0x25dfdbff, {0x1b}, [@nested={0x121, 0x7f, 0x0, 0x1, [@generic="dccd32ac50b3ef0decd101596c2b7affe5d8b4aab9550bebd8b69c7e9591ff5680b9ff4b04cfc7dae09b636613dafa2fc3a046f1489eaedb193b407393ebd7fe125b8c7ce2bd2276ee1ed0c4f6dd5dde8dff444b93e955acc94fc33109abecdc8895a5a6ce143ffb3ab5ad464de67c10a9d0c27682839e7871bd33b3311406721c65c0b6b5acab9950b6cc7f36376d34c88618d776ebead551d72639eaed0791a11015093c509ccf18acbaf11eb9a8165571352991b828cfdb2c78d027c7abe363f6b20896ac922119c0d93ea57800b7c0394537858f25efd0b0b0f7c3c306bb398d59426086a34f708faf", @generic, @typed={0x8, 0x9, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=r6}, @generic="f2ba57618d812befee1aaf1c3834fc76fdfeb294ae04be530d3eea12529e839c8ab7"]}, @generic="3e7129f03b598d56b5ba2aa5edd8b00b909c8a31f2b4669efcc8d68938e7a0dcf89422358c423da4c49d527799a31648482e231287ad20896bb6489d98ab949cbe8960854f11e48ac31a28db2dc22c7ff05c9571a1ea5025e5077301e11f9b4aef7d9b07c6b12d97843ec67b0a27861d53f16fec51b8f16a7ee269d8a4a45c78fbce63021a33a2b57dce7700d897b986eb222919332ee2bb02dba25cf26fb04e571f9b7f87513447e6612e292557aa01"]}, 0x1e8}}, 0x4008040) 18:20:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x1f, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x10002, 0x0, "56a05bf357d02c964565d12c982188953a9861"}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000100)) 18:20:18 executing program 2: r0 = dup(0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xf8, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x3ed}, @typed={0x8, 0x2e, 0x0, 0x0, @u32}, @generic="863b4f6ba06e69fb696a5a57a4b6c69f7805168969d93a7f636961cacf12b3e7b7ed7aeb11945358db26c06693ee1f4d4ff97b0ef5dd0bca599190ffa3236535378ae65b87f6c4ebfc8a17604d0aba82c33c5a1f84082dc03124366426dba0685ba9a66e81cfbecd14568b441390fcdbca14c3a0f4acc01fc53d7dafc3e605e96d588a10e1e52b2ee172f20163ccef3115a7188d1fbfab651316c11aa3d54cd0dccd86d5f99faaf570356f429b3826c627ab75a5c1670b1fb364c78bf892c44d4349600de5db4607", @typed={0x9, 0x8f, 0x0, 0x0, @str='+\x00u\x1b\xdc'}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc800}, 0x20040050) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = timerfd_create(0x7, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x5, 0x4, 0xd51, 0xda82, 0x0, 0x100000001}}, 0x200043) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x14, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) 18:20:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616eb0477c452c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$wireguard(0x0, r2) 18:20:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x2, 0x9, 0x3, 0x7, 0x0, 0x0, 0x76c6, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create(0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) flock(r0, 0x2) 18:20:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mkdirat(r2, &(0x7f0000000000)='./file1\x00', 0x18) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000, 0x0, 0x2}]) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) dup(r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) [ 117.738694] audit: type=1326 audit(1672078818.309:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.746571] audit: type=1326 audit(1672078818.317:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.764050] audit: type=1326 audit(1672078818.317:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.791804] audit: type=1326 audit(1672078818.322:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.819207] audit: type=1326 audit(1672078818.323:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.850869] audit: type=1326 audit(1672078818.331:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.880824] audit: type=1326 audit(1672078818.332:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.906316] audit: type=1326 audit(1672078818.332:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.920588] Restarting kernel threads ... done. [ 117.937819] audit: type=1326 audit(1672078818.332:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 117.962768] audit: type=1326 audit(1672078818.333:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4006 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e90cc1b19 code=0x7ffc0000 [ 118.458996] ISOFS: Unable to identify CD-ROM format. 18:20:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000000)='.\x00', 0xe4d1678, 0x0, 0x0, 0x43020, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x4) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x106) 18:20:18 executing program 4: creat(&(0x7f0000000000)='./file1\x00', 0x72) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}], [{@uid_lt={'uid<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, '}*:O{&\':,'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trans=fd,'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) 18:20:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x641e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000006, 0xf154c79f1722d852, r0, 0x10000000) sendmsg$unix(r0, &(0x7f0000001300)={&(0x7f0000000080)=@file={0x1, '.\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000000000)="139800daab1465f7cb5baf7d9ab2adb56b1bcdba2c0033398cd16d04ed8f5c7e20f53e428905109a6cb6cb", 0x2b}, {&(0x7f0000001100)="165aa0349ed57df66e029238c7dfd0082995dd362d04ba6b322c2b58ae167e2dc2450b5c71c6e77a5a94dff993fe064d87ddb3511b1fcf118a751902f36a6c60e3c0f08dfcc7c6ceaa9956f931e47fb7eaef064a3cdcf96c183460a4bb936e81be57e72143ffb53fa5e43d439283fcf1d1d2e6c2649379f6b68b394f52fb06dd6a4e5010e19b6140a3fd9555cd86ec1fb931e37cad56c4b16dd14c0c8a381061a26b3a794333", 0xa6}, {&(0x7f00000011c0)="5fafc35c5ba6c68f886f8ef24747ea39ef7c14dee8a5c9492de4f4776ab3992be0e09e7d48891fc80e67c55ea1fddfaceff724609f50b1ddb1de7291aa4d07128843b2ee64389548d281ceab924c95915e6375f0b522c84f45c77cae17267ac340e60a212ceab1d5d47806fbe1b2d7b3517541b7690d676fa384904033c7fecdc7bd7ab191c0ed02d381b2e9ee3a1d9bd815f1a7c9c3e29d4f4feb990dc08779f982f15f68d831454a96da66aa25217caf17e432a55bd5caa313b35ea5f1ee934df6500994ca", 0xc6}], 0x4, 0x0, 0x0, 0x4}, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001340), 0x101000, 0x0) syz_io_uring_setup(0x1a5d, &(0x7f0000001380)={0x0, 0x322e, 0x4, 0x2, 0x300, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000001400), &(0x7f0000001440)) pkey_mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:20:18 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) timerfd_gettime(r0, &(0x7f0000000000)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f00000010c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) 18:20:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000000)='.\x00', 0xe4d1678, 0x0, 0x0, 0x43020, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x4) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x106) 18:20:18 executing program 2: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7362736563746f723d30783030303030303030303000aae1fd880dc018571a31dca475f201ebdf8eacdb61a681d9ed86be48ee86e1ea6f306b64d6b8f3b931d86bb3baaa6a0cec1423ab0974698da5fc538c7744997d136b2786240d390ba37e4572bccd067b6c36510de30f7f2639c5e1f53ac061c9065f"]) execveat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='^(\x00', &(0x7f00000001c0)='sbsector', &(0x7f0000000200)='\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='%[$\'\x00'], 0x800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) execveat(r1, &(0x7f0000000380)='./file1/file0\x00', &(0x7f0000000480)=[&(0x7f00000003c0)='%[$\'\x00', &(0x7f0000000400)='T//\x00', &(0x7f0000000440)='^(\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)='\x00'], 0x1000) 18:20:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r0, &(0x7f0000002c00)=[{{&(0x7f0000000300)=@abs, 0x6e, 0x0, 0x0, 0xfffffffffffffffc}}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4042, 0x40) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x80101) [ 118.627329] ISOFS: Unable to identify CD-ROM format. [ 130.469725] kmemleak: 44 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:20:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002d00210c000000000000000000000000140000800c000000000000000000000004000b005c3dba16f3f2d6deb0db5b211291a67ce38b303af3736029480898e0bfb995cbbe4d02e37e1c7cb0a6106c452a065d939d278f64846940b85c0f1e4d762a2364f5a9238461d9a712c2343fe7102c5e1dd275f59b072031e5c5d8cb1e1199f3c9bc4429f9d564df21385a0a41e749f2bd5991fcc1dd466596d227435c08966dad27722b21d16fe70952dad9a0fde3f68a9afbaa0a83f0", @ANYRESHEX=r2], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 18:20:38 executing program 7: write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x20, 0x0, 0xfb, 0x4, @tick=0x7, {0xf9, 0x8}, {0x1, 0x1a}, @result={0x9, 0xdb}}], 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x2, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd02010000000000000000dccecadca50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0000000000000000000000000000000000001f4e9a31fd280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000080000000000000000de0000000004000000000000000000000000000000000000000000000027aa887d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"/248]) r2 = syz_io_uring_setup(0x710e, &(0x7f0000000200)={0x0, 0x9442, 0x8, 0x3, 0x3e2, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x7, @fd_index=0x3, 0x40, 0x8, 0x10001, 0x2, 0x1, {0x3}}, 0x612d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x802, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:20:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000200)={0x5, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @private=0xa010101}}}, 0x108) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000001300)=[{&(0x7f00000001c0)='cg', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_u8={{0x18}}], 0x18}}], 0x2, 0x0) 18:20:38 executing program 2: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7362736563746f723d30783030303030303030303000aae1fd880dc018571a31dca475f201ebdf8eacdb61a681d9ed86be48ee86e1ea6f306b64d6b8f3b931d86bb3baaa6a0cec1423ab0974698da5fc538c7744997d136b2786240d390ba37e4572bccd067b6c36510de30f7f2639c5e1f53ac061c9065f"]) execveat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='^(\x00', &(0x7f00000001c0)='sbsector', &(0x7f0000000200)='\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='%[$\'\x00'], 0x800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) execveat(r1, &(0x7f0000000380)='./file1/file0\x00', &(0x7f0000000480)=[&(0x7f00000003c0)='%[$\'\x00', &(0x7f0000000400)='T//\x00', &(0x7f0000000440)='^(\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)='\x00'], 0x1000) 18:20:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/39) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r1}, 0x80000000, 0x1, 0xfff}) socketpair(0x11, 0xa, 0x9, &(0x7f00000005c0)) r2 = socket(0x21, 0x2, 0xa1) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x1) 18:20:38 executing program 3: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x0) munmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0xf7, 0x0, 0x8, 0x0, @private2, @loopback, 0x7, 0x8, 0x0, 0x68b1}}) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x80000d) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200001, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/238, 0xee, 0x1, &(0x7f00000002c0)=""/87, 0x57}, &(0x7f0000000380)=0x40) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xe40, 0x2200c1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, r1, &(0x7f0000000040)={0x90002004}, r3, 0x3, 0x0, 0x1}, 0x4) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001400), 0x107000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x20010, r0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001ec0), r4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002040)={'syztnl0\x00', &(0x7f0000001fc0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0xad, 0x7, 0x8, @empty, @loopback, 0x7, 0x0, 0x3, 0x3}}) 18:20:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001d00070003a409f827b2250c06"], 0x14}}, 0x0) read(r0, &(0x7f0000000100)=""/153, 0x99) perf_event_open(&(0x7f00000010c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:20:38 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = getpgrp(0x0) ioprio_set$pid(0x1, r2, 0x0) r3 = gettid() r4 = getpgrp(0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) timer_create(0x1, &(0x7f0000000380)={0x0, 0x18, 0x1, @tid=r5}, &(0x7f00000003c0)) ioprio_set$pid(0x1, r4, 0x0) r6 = getpgrp(0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r7) r8 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) clone3(&(0x7f0000000840)={0x80, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xf}, &(0x7f00000001c0)=""/115, 0x73, &(0x7f0000000240)=""/177, &(0x7f0000000800)=[r2, r3, r4, r6], 0x4, {r7}}, 0x58) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x6, 0x800}) [ 138.136849] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 18:20:38 executing program 0: unshare(0x480) unshare(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x941000, 0x0) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="c7c4bcee0ef8d646a0623c000ef6c9b9e211c89c393757acddc794a7881faa09"], 0x5bc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) prlimit64(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r4) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f0e80efa0e4db3d5929d65a3dc108b2979359fe06ea042277f112a2d00eecc5645686a77f9d5eadbbe0dea86a21859ebb568c4f3e6842441919a3c534760d39c6ca0c6f008aa8262cada366ba389baa655ba3726a32c5657b51b9dd91716b59e17c85aff1d2f820de574cbd205c0eac08abd4f44e6a223acdcf535642", @ANYRESHEX=r4, @ANYBLOB="2c772b1e6e6f3d", @ANYRESHEX=r5, @ANYBLOB="df8401a8df280826cda27cf13cc46c459a2a0ea029e47b08cc9e6f4f91e11ad5cbee9b9392c391e2068e50398dab847c132e208949069bf55465c64a749452f51e1141dca478dadb8792359047"]) dup2(0xffffffffffffffff, r4) prlimit64(r3, 0x0, &(0x7f0000000080)={0x7, 0x7}, &(0x7f00000000c0)) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) 18:20:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) connect$inet6(0xffffffffffffffff, &(0x7f00000013c0)={0xa, 0x4e23, 0x10001, @remote}, 0x1c) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000001380)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) [ 138.289330] ISOFS: Unable to identify CD-ROM format. 18:20:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r3) syz_emit_ethernet(0x66, &(0x7f0000000340)={@remote, @empty, @val={@val={0x9100, 0x6, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x80, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x40bd, 0x5, 0x9ed1, 0xfffffff7, 0x0]}, @fastopen={0x22, 0x2}, @sack={0x5, 0xe, [0x3f, 0xc526, 0x0]}]}}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x14}, 0x14}}, 0x0) [ 138.525950] 9pnet: Insufficient options for proto=fd [ 138.586208] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 18:20:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000002a40)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001900)=[0xffffffffffffffff], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)) r4 = socket$inet(0x2, 0x3, 0xff) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[r4]}, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[r0]}, 0x1) 18:20:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r4) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x75b96a23098a762, 0x9, r4, &(0x7f0000000140)="f0c24f31e84be12f836ad34c94c1de0ccafe98ac14aa9811a2284dc9acd3528f819513df50cddd2c4e995f4f247618ace7da2b1920921c7a44fc6861b765b2609b5bfebb08be992fbbe6860c760dd404fd0d99f94f9452c39d3c4f0fb7d64f66f443af5c4e02c802e3f8b4dfee1caebccd07084aff0ac46e096aa1d1049da7252e24ca45af0d1e423246ec12d4637cba7402124ed9668878a5b03f4cca7582276602f8eac7d7958236199bb8ccb67f9a83e9d56245fd9ca6fab81902946949c3124d086957173ee44e32067e9ddc193e9011ff104c3af8", 0xd7, 0xfffffffffffffff7, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f00000002c0)="c70577645e038ce54f45beded7255c4909b906f65a974588a452432c1694b91adc88518cf268d6feb4a57bd709e363a6733ff6e80686ce21cc6702c67d5baf1cee83462c349d15b9cf3856fbd6549ebca8ac144223a718d8a77f6a7b6743", 0x5e, 0xffffffff, 0x0, 0x3, r2}]) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x110, 0xffffffffffffffff, 0x8000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000240)=0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0)=0x7f, 0x4) [ 138.900787] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 18:20:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000001100), &(0x7f0000001140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000014c0)=ANY=[@ANYBLOB="010000000100000018000000d4e34862489a7a16b9ffa4250dfe13202d4240f08db542406e8064ea2509716b066bec488627136cbe5635f466cdce0ca1a9750aeb0af90acef40ea2f420102e9cae7b1854efe087da0ed8e05bff63dd378a614dd69d5cdec742aae46af3446f076ec3269e109b05ff4d71f7a98aae6eb777b86fedc53b3e22827421bc39b52706892c34fcfc5265b4959068dba22257cff2e559412f445af92964c94d80830871736ffb12bd25492a3a64e0135a8cafd994fa7ac054ee72d6278e1a9d15237440a3a2e0c83a70c74fcdfe3b8b07c9e31ac3760b529ee3512c2cc9313629d4ba8d8a92a5114e28ccdd886eeb40726bc08901bd2cf26efbf3b9e18b33df1833f363d81288149500c63539469b20e60e208d9dcc7ba72418b6c3841666", @ANYRES32=r2, @ANYBLOB="ff7f0000000000002e2f66696c653100"]) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) connect$inet6(0xffffffffffffffff, &(0x7f00000013c0)={0xa, 0x4e23, 0x10001, @remote}, 0x1c) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001180)) r4 = dup2(r0, r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r4, &(0x7f0000001380)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) [ 139.066242] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 153.970377] kmemleak: 42 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:21:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x10120, 0x0, 0xfffffffd, 0x0, 0x1000000000000000, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='tXans=fd,rfdlo=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) fchdir(r0) 18:21:01 executing program 6: clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000a80), &(0x7f0000000ac0), 0x0, &(0x7f0000000b80)={0x0, r0+10000000}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0x1000]}, 0x8}) r1 = syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, r1, &(0x7f0000002c40), &(0x7f0000000280)='./file0\x00', 0x400, 0x0, 0x1}, 0x80000000) recvmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000980)=""/171, 0xab}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/12, 0xc}], 0x6, &(0x7f0000000540)=""/249, 0xf9}}, {{&(0x7f0000000640)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/82, 0x52}, {&(0x7f0000000740)=""/152, 0x98}], 0x4, &(0x7f0000000840)=""/31, 0x1f}, 0xfffffffa}], 0x2, 0x42, &(0x7f0000000940)={r2, r3+10000000}) clock_getres(0x4, &(0x7f0000000000)) 18:21:01 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$rfkill(r1, &(0x7f0000000040)={0x9, 0x2, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 18:21:01 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40000, 0x40) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8005) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) 18:21:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(r0, &(0x7f00000004c0)='./file1\x00', 0x400100, 0x4) close(r0) r2 = epoll_create1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/udp\x00') r4 = add_key(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x9}}, './file1\x00'}) copy_file_range(r5, &(0x7f0000000340)=0x4c, r1, &(0x7f0000000780)=0x9, 0x21, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000600)={@desc={0x1, 0x0, @desc4}, 0x40, r4, '\x00', @a}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000500), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}, {@mmap}, {@uname={'uname', 0x3d, 'trans=fd,'}}, {@version_L}, {@access_any}]}}) r6 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x23, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c4b4bb3df91cf45b33e138146cf1024613d283d4228ddbeaa4a782934e284b128c9fa4c49fd34be28fb2f2e56b7a74f5c6c680aa5a21f95231eafc6527712e73f995397fe66d32eefcb8ddf9551a2e8805d9031f0db21b31349eab00e34e25bea30fe511f792aa6bc46fdb9e0e3f147b10d8bf9b8d8145691b520bded42409b7db0ba269bf22ff5", 0x88, 0x80}], 0x200d021, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=bind=relative,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c687567653d6164766973652c73667a653d382d343778362c6e725f626c6f636b733d742c978597b730303030303030303030303030303030303034312c00"]) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r7 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000007c0)={0x7, 0x7, 0x3}, &(0x7f0000000800)=0x28) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x7) mknodat$loop(r6, &(0x7f0000000380)='./file1\x00', 0x2, 0x1) sysfs$1(0x1, &(0x7f0000000140)='nfs') 18:21:01 executing program 7: write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x20, 0x0, 0xfb, 0x4, @tick=0x7, {0xf9, 0x8}, {0x1, 0x1a}, @result={0x9, 0xdb}}], 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x2, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd02010000000000000000dccecadca50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0000000000000000000000000000000000001f4e9a31fd280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000080000000000000000de0000000004000000000000000000000000000000000000000000000027aa887d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"/248]) r2 = syz_io_uring_setup(0x710e, &(0x7f0000000200)={0x0, 0x9442, 0x8, 0x3, 0x3e2, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x7, @fd_index=0x3, 0x40, 0x8, 0x10001, 0x2, 0x1, {0x3}}, 0x612d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x802, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:21:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f47d5fe0f4655f100000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) 18:21:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x10000000) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8000}, 0x1) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@x25, &(0x7f0000000200)=0x80, 0x80800) sendto$inet6(r2, &(0x7f0000000040)="0ddda97e1a753de89605e0a72073014431a38e956ccaa5e26936e41d354e15f06995b87a2ba8649b933553bd6b89b504ff75822ade8903a832255619ddeb8d6a23b2683ec6699c0b516855e8c1b177fb570346ad646d54771d7c4a92c0fdbdad735a412a44fdad6f955e10ab6593cfa06b0638c7f06a7e5f868610195398645ed08d1930a13b755d659e70b276b04cd3a7a9e5a7357ee875117dad3892f54b33d616c30a47c3d99833bd77e8", 0xac, 0x4845, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095532792ea18aa2d9ae4e0b7f1670025bf11f2b4afdb9c10eb6a0f5e2142d3b703457663ce8e813d82f7b07566b73a1f24549835d7c1ca13442662335a4e02da4199ecb2b4b62c022b1ac7f4688b47c8", 0x9f}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'gre0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dc7ba47fd71b236171630a6f3ebabddf86856795762cf9c53764440a3dd0816c3edc00d39424bfa3944ce9e7ebc434bca41b77268dc4feb6f32820057823b910fbd26cbb112e40a5532a187e059017a853ff4eb179de632", @ANYRESHEX=r6, @ANYBLOB=',\x00']) fallocate(r5, 0x40, 0x7, 0x0) fcntl$notify(r4, 0x402, 0x0) [ 160.825923] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 160.851054] 9pnet: Insufficient options for proto=fd [ 160.865663] sg_write: data in/out 33555249/111 bytes for SCSI command 0xfd-- guessing data in; [ 160.865663] program syz-executor.4 not setting count and/or reply_len properly 18:21:01 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/217, 0xd9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e401856bb872616e733d66642c72a6568354106eba32", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/217, 0xd9) write(r2, &(0x7f00000002c0)="46f56361e95af9f9feb40f5125bafa723de87d40546ed18982ad4b2a4e667d7e419c", 0x22) inotify_init1(0x80000) openat(r1, &(0x7f0000000080)='./file0\x00', 0x8000, 0x140) 18:21:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x101142, 0x40) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000140)='./file0\x00', 0x110) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000001c0)={0x1, 0x1, 0x100000000, 0x3, 0x20, 0x2}) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) 18:21:01 executing program 7: write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x20, 0x0, 0xfb, 0x4, @tick=0x7, {0xf9, 0x8}, {0x1, 0x1a}, @result={0x9, 0xdb}}], 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x2, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd02010000000000000000dccecadca50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0000000000000000000000000000000000001f4e9a31fd280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000080000000000000000de0000000004000000000000000000000000000000000000000000000027aa887d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"/248]) r2 = syz_io_uring_setup(0x710e, &(0x7f0000000200)={0x0, 0x9442, 0x8, 0x3, 0x3e2, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x7, @fd_index=0x3, 0x40, 0x8, 0x10001, 0x2, 0x1, {0x3}}, 0x612d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x802, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 161.256996] sg_write: data in/out 33555249/111 bytes for SCSI command 0xfd-- guessing data in; [ 161.256996] program syz-executor.4 not setting count and/or reply_len properly [ 161.449946] 9pnet: Insufficient options for proto=fd [ 161.614200] 9pnet: Insufficient options for proto=fd [ 161.942855] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 172.444363] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 18:21:20 executing program 7: write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x20, 0x0, 0xfb, 0x4, @tick=0x7, {0xf9, 0x8}, {0x1, 0x1a}, @result={0x9, 0xdb}}], 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x2, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd02010000000000000000dccecadca50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/256]) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0000000000000000000000000000000000001f4e9a31fd280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130000000000000000000000000000000000000000000000000000080000000000000000de0000000004000000000000000000000000000000000000000000000027aa887d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"/248]) r2 = syz_io_uring_setup(0x710e, &(0x7f0000000200)={0x0, 0x9442, 0x8, 0x3, 0x3e2, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x7, @fd_index=0x3, 0x40, 0x8, 0x10001, 0x2, 0x1, {0x3}}, 0x612d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x802, 0x2) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 18:21:20 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)="99eafc71f18f19610d95c9d3b238d45f6818da037f37f6840a5332fd19e2ed2a7fe2bf13cd82ea6068caa0449787c12d49399448ad08ee95e11ca67c0adb46b61d60b8c7b29149e01df9307584e2074210e4ccaad5d7ca7469345d37ea24b09dbc2feae10de3e9691c7b94704906d52dc182daf1a0e3b391e33e54cb0e3babfb7fdca5bd48cf2719d30d5c870cd162ee2120fe25a450df33f89c578c20c00a2e39ae3437b102785208f9932a8dd112fdbb1837b8a0d58a3499c7d2996cab83ef3040b352f7f9c21e02cb21c43fe599e584cb53", 0xd3}, {&(0x7f0000000140)="958719adced6c44fe6db1b73e805e6ebaae44199f2395f6290f68bb729eb964798511f4271b9", 0x26}, {&(0x7f0000000180)="40a384a2d6574daf0c1a5c5a5bdca2831c", 0x11}], 0x3, 0x17, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0xfff, 0x400000) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x44, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@cache_fscache}, {@access_any}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@nodevmap}], [{@euid_gt={'euid>', r3}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsname}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '}'}}]}}) 18:21:20 executing program 0: r0 = syz_io_uring_setup(0x25, &(0x7f0000000080), &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180400) write$P9_RWALK(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x30) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:21:20 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/virtio-ports', 0xc4902, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000280), 0x8, 0x4ca00) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/crypto\x00', 0x0, 0x0) r2 = accept4(r0, 0x0, &(0x7f00000002c0), 0x800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000340)={0x800, 0x0, &(0x7f0000000300)=[r0, r0, r2]}, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) getdents64(0xffffffffffffff9c, &(0x7f00000000c0)=""/251, 0xfb) getdents64(r0, &(0x7f00000001c0)=""/135, 0x87) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x800}, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, r3, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f0000000380)="cd6d893841d07b2c9c25b25eb953ac583be9b7a2b7dbc6df8268987685f7cd6c9fd11a4437c51a68ac8953c4a1a65c9f47dd9b853bab9a728c1744f4eb8de13f077275f24c1843bc8d88ef911fddd3d058bf550a6b32b3c4b2c2594d9802e68f63adb408a508b250a4ff80e21c453e0426fa482397d8d458ed3b57f31d89123d50584b0c09151ef7b7c6e5705ee209970552364656f80e4ebc3a591b5a6a15801f13351589c31e00ea6c56ce67866c4d18c7de34f1aee54b4d9a8945a94ab6d5275324d5e8a8f88058f6746b30abaf2373f5d4ca9a2f30086af5fa637eb00b6afc73b2899360", 0xe6, 0x44080, 0x1, {0x0, r5}}, 0x9) 18:21:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x10000000) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8000}, 0x1) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) accept4(0xffffffffffffffff, &(0x7f0000000180)=@x25, &(0x7f0000000200)=0x80, 0x80800) sendto$inet6(r2, &(0x7f0000000040)="0ddda97e1a753de89605e0a72073014431a38e956ccaa5e26936e41d354e15f06995b87a2ba8649b933553bd6b89b504ff75822ade8903a832255619ddeb8d6a23b2683ec6699c0b516855e8c1b177fb570346ad646d54771d7c4a92c0fdbdad735a412a44fdad6f955e10ab6593cfa06b0638c7f06a7e5f868610195398645ed08d1930a13b755d659e70b276b04cd3a7a9e5a7357ee875117dad3892f54b33d616c30a47c3d99833bd77e8", 0xac, 0x4845, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095532792ea18aa2d9ae4e0b7f1670025bf11f2b4afdb9c10eb6a0f5e2142d3b703457663ce8e813d82f7b07566b73a1f24549835d7c1ca13442662335a4e02da4199ecb2b4b62c022b1ac7f4688b47c8", 0x9f}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'gre0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dc7ba47fd71b236171630a6f3ebabddf86856795762cf9c53764440a3dd0816c3edc00d39424bfa3944ce9e7ebc434bca41b77268dc4feb6f32820057823b910fbd26cbb112e40a5532a187e059017a853ff4eb179de632", @ANYRESHEX=r6, @ANYBLOB=',\x00']) fallocate(r5, 0x40, 0x7, 0x0) fcntl$notify(r4, 0x402, 0x0) 18:21:20 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/217, 0xd9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e401856bb872616e733d66642c72a6568354106eba32", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/217, 0xd9) write(r2, &(0x7f00000002c0)="46f56361e95af9f9feb40f5125bafa723de87d40546ed18982ad4b2a4e667d7e419c", 0x22) inotify_init1(0x80000) openat(r1, &(0x7f0000000080)='./file0\x00', 0x8000, 0x140) 18:21:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000140)=0x8, 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 18:21:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(r0, &(0x7f00000004c0)='./file1\x00', 0x400100, 0x4) close(r0) r2 = epoll_create1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/udp\x00') r4 = add_key(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x9}}, './file1\x00'}) copy_file_range(r5, &(0x7f0000000340)=0x4c, r1, &(0x7f0000000780)=0x9, 0x21, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000600)={@desc={0x1, 0x0, @desc4}, 0x40, r4, '\x00', @a}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000500), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_any}, {@mmap}, {@uname={'uname', 0x3d, 'trans=fd,'}}, {@version_L}, {@access_any}]}}) r6 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x23, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c4b4bb3df91cf45b33e138146cf1024613d283d4228ddbeaa4a782934e284b128c9fa4c49fd34be28fb2f2e56b7a74f5c6c680aa5a21f95231eafc6527712e73f995397fe66d32eefcb8ddf9551a2e8805d9031f0db21b31349eab00e34e25bea30fe511f792aa6bc46fdb9e0e3f147b10d8bf9b8d8145691b520bded42409b7db0ba269bf22ff5", 0x88, 0x80}], 0x200d021, &(0x7f0000000280)=ANY=[@ANYBLOB='mpol=bind=relative,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c687567653d6164766973652c73667a653d382d343778362c6e725f626c6f636b733d742c978597b730303030303030303030303030303030303034312c00"]) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r7 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000007c0)={0x7, 0x7, 0x3}, &(0x7f0000000800)=0x28) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x7) mknodat$loop(r6, &(0x7f0000000380)='./file1\x00', 0x2, 0x1) sysfs$1(0x1, &(0x7f0000000140)='nfs') [ 180.271271] sg_write: data in/out 33555249/111 bytes for SCSI command 0xfd-- guessing data in; [ 180.271271] program syz-executor.4 not setting count and/or reply_len properly [ 180.306590] 9pnet: Insufficient options for proto=fd 18:21:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@seclabel}]}}) getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000140), &(0x7f0000000180)=0x4) 18:21:21 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000700)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000029000000360000005aa400000000002618b80a4608bfc272f451e212a8b6d1da123260157bd1"], 0x30}}], 0x2, 0x0) 18:21:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@noprefix}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 180.614581] cgroup: noprefix used incorrectly [ 180.643239] cgroup: noprefix used incorrectly 18:21:32 executing program 0: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00c567003e867364372f666903000000000000003000"]) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x13, 0x32, 0xa, 0x8, 0x9, 0x7, 0x6, 0x140, 0x57c371147aca7cca}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x1c, 0x0, 0x12, 0x4, 0x8f6, 0x1, 0x15b}) dup2(0xffffffffffffffff, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 18:21:32 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r1, &(0x7f0000000100)=""/217, 0xd9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e401856bb872616e733d66642c72a6568354106eba32", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read(r4, &(0x7f0000000100)=""/217, 0xd9) write(r2, &(0x7f00000002c0)="46f56361e95af9f9feb40f5125bafa723de87d40546ed18982ad4b2a4e667d7e419c", 0x22) inotify_init1(0x80000) openat(r1, &(0x7f0000000080)='./file0\x00', 0x8000, 0x140) 18:21:32 executing program 2: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/209) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40c82) readv(r3, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=@shmem={0xc, 0x1, {0x2b4}}, 0x8002) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_open_pts(r0, 0x40040) 18:21:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, 0x0, 0x37) pwrite64(r3, &(0x7f0000000240), 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="acc2fabcfa1f707e551c6bfb1f9e13dcfff8c1b8db9f644df025bbbae8e76ad797046f351805da41946dc989fba39dc6bda8bfff7ea499463092edd85f580ce0934d65fb0900000000000000b68c48258552f87c082743eb315f3c1cc11d5099e49647f0fc81b1c7a9ea430e0e4569e26eba8c8b8a4d81000000000000", @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x1, 0x18724ac1, 0x7}) close_range(r3, r6, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80cab25bd76ade37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r7, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 18:21:32 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xf2a9}}, './file0\x00'}) getsockname(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000004c0)=0x80) setsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="19d41b1d8705bb7ffaf07bb3fc004b55aca64ff843f391ee51c3141d4ed0db5b3c0a49fb50199f5583c3fcfa25ba4d21230dc433751f815844117dae367b606ac14147f3921bd66e7a4729ee102c6349b797a4a6cdbe46d9becd3de8caa5340a711f09d6bce01d167d23d78ae3b62f04448ef581a478820d98c38d35befcd7c286aabb45c778ec82db048657c796c7179bc9271f27458ebf434bbc9e025b", 0x9e}, {&(0x7f0000000100)="0d84eff7eddce466152f6f1f608e0a9d7d9a3d6c138d7b227ceb24503319e069aaa9099092055ec4a58005fdb44af43fef8470d0c18560706029605a6d17d4d6ba6f9f38a3f4f13ed7f7d48d6259689a1675153f8f868c22188b6b3b5f", 0x5d}, {&(0x7f0000000180)="8d7a9a594e849f114265a7564b89dd8225e30de0bdd94ff2db6a154418966a5f8d", 0x21}, {&(0x7f0000000640)="312225d37b778784dae78de80b100a2787c26e6a9bfacecebd2444d6a0342a22c31ff40d8689a9b4dbb39bd82d889b93a3a9c136354895282ce063c9342a664f8779667865a6e58c34befc81f6bd06354cf5dcb5cf004380ca74bdd18879047bdb79360a4fe604a5246f09b87289b4d61622a353e9119e202a4103cb140a4aa371aaf0c5410f8b62e566dcf06ecc25aedb2ab0f4a1dcd5fb402ea24708675946d910e1e0b5eb57a4be35e32083f52df481d4c26131317741599dcbe1b23ec621e6e5983d3f2b060603212d8ee1c8096f4d96fd2ce4121623279456913c71c8e8695b46de206f3816918545b2ab5e8dbe3f4655003f8ecedf57a8db0dc4ff3e575228a3cb79d7a5d2d7be46f1793c694529c50bca56d42ea7ad4a1c421d12822d604d6cdc80c8081783385de34b012bfd9d435c4333cbad237579cc70f34a10a04f22a4b1b1e8459573818d09192c6d59e075ca2a8d83f4b6688ffa07cbf10e20d4a2799fb2c925fdcdec97cb96bcee23fc33bd4788fd1c7f058e304b00651bd0ad849cea7cd721cb8473f89b70bad808e94b69be0229da3197f0d7fcfa458906ccf1a8d4cc2cbf8b2a4473303d890bd2c8e7a9a46eebaa537b81bb8ddcc9bda6e003b0c6e888f80d0870389509d1650cafa629e4f9dd2d6196017e3a12d1c0f64c31fc135b533177b13231d32b79dedc76e47dc2c945bf6b3071eef05bb5ee1fc49d0afa81458c82294be8cb9234cf00dcb39903f5da3213e9ab95016119750c3a1a03e2c12a61910016e433b8335212b3ed6f8468ec0367a4a959ea5ee55a7a823d549ea8da22f9ac52fbf253002bcd799f157f1bc62d5d2cdee11a3988ce9f7c064946a11508cf9df6780517d61896e2430d149a8098e32212c238ffc0dfb243f14044d131b2f733a1675ed49bf9bf796ebad23312ff4dabe73d2cc5d6095f8250c3cf64e8b60ef09472ceba007ad5fca8a777d410ac8900e816fcaa4205e64bfef1f98b7390cec385392d17909fd3c8835699d887a9224e0c3c4c9f5474d7b7a06c6af4853f13c872f2ed07387f9b21fd269def314e71a6537a393a85bfb7ed57c533ae20e97ea0139272e689a970f487ff3c2bf886e520f52d9a095856b6e675f1d82efbe13534173977ca6a89c2a23746e7f4d84d892556a720a5811cbc6ef9cb90f4a00294ecea5b0548eba49ac0d73d942d77ba79a28860c0f292587ef61d6b8e57c199051c72d05b57a2cdf76487d09f1ad0bcb619ba3995189a0378e34f208edca2981b1b7ff50d392abe7cf5a03473107f55277000115ba8e43c48e21e1f6cbb78a773cf38f156593330ead54c7a5052599e1f9eea9b3dbfc8204f7875485a41fa0e797698b3acb899650119094679f7a7f2965df4d13a9232604c57656ed370f9522e9647a7ac06785d5d22205e6e94ceb7d7039f6fed32903e4c8dc9d1f3c9aebc79b61984b7c34658889e96fc331e587465005ca16e3ba32f8974a44de7c423068f56598a376c6f64065d0f59eab65c5d7737b3524c488a61d5f49e4aa23b2650ffbc562ad39a835d92a1ecbc95d5b40b3306dbdbb7ba370b6937cad1bfdab9f9e3c58a53f2f5c29234319020606889d483b0b2733174ccaf0812676a92c97c61bdccfeeef1c86badb66653d3887ae00a3cc4756a53f394a540b94a3fdd4e3279017a6cf2655bd3b2b6e7f79e3b33e8d6d351b1532adf28d2acf01e921c655b293c1516f0b313d85e03938589e2dadadd308b38d0b36d984ba9f25a4d18aba99f2637c452a5d58bf2d9bb1237a1e57047fe16d3736c8310d8dfade6efc3574adda76b756d29edad663bf53541a6037538bc62cc152efac82ca3868f9087a6af2737eb3a89b8fedb77f80dcb3e256f6e45559b92a52a8be0471ba6c9794d70f56f25ea2aa05a85c82682d21b3c39d38a98f653369064595a3a4aea661f6bb5be33ac46984ec14164a8fff03707fdb7609f1ad8f2255c4b4b7878aa22684f5b4abe099bea293d9cfd8f523f594f5f6a17068614731f9373e4271bb032e3c8287d75f727207ab23f982e6518f7df6c5409ab1b8adb2ce5f8b351a8d35286f5fdcdeef246210cabcdad203634c1beadec221142f74eac094e17514252b313668572f5f9b0814609de2b15414927cd5d9700d11026491ffa8a12d4d4f8db7ff3198de31737072acda0b3fbae2c2837421df56a7b9207b22df20efcdeb03d8f83a012efae541679cec75fca46adcc08872f9945842bbc741ceb5e28ce5d7b9fae1fc19cdc9c423faca2e83e693c05380d1c27cd72c55917d3ebc414b44ca30e05e890034f0fd7ee53abb1e2d9e1e69a3ec329243308e8068a6471ed1da43e1fcc20bef0f673632a91ccaf51d687030d1eabb9c1f6bced3772c8fed283f089fb8a86bb16c2dd3e46b916d077c9076dc7b97d34b07bd202d735ea4a016530e9b6b9264eec70a5ddcd22a78ae88338f4b3ef7fd1519ea4b95380777cb5329e9f53872a4ee0dd40e5407574fbceb796263b8d468fafba6e1ad4399d836cce8c88051c8f10014c7c18ae7bce3cc9bccb9616b3dcef6135c88a3209f57260ebcdbf449d9d46327f9282bac60551118f643a206a5d7e427ae725c9e6661309bda0fae4b331cfbf7d487e624aa8dd38e3e1951c841e66bfb3af10afc2bd7bc8ec502bc98f58f9cf39e73382048051ff0ae98d49127b204d651b2506e81cd8546868716e41eeea610f6d92a00565db69fbe8e2648e3a66138b88198db67113cbf89f01517d141bdeab205d48bc3bef81a59f2dc3cf141eb16af86da3a013511b612f27d87d77b0e0f71421c41899924af29d37e76e1ac568c563cb3a186d200392a6a1440f393edbec89cef7f07e06cef48bedfebe9f30d4f4516078b35a9c177fe97aef630abb86d7dae9cd14d2cbe884c66bf459253b2c8c27a9fda72f20e49c0f528c1380cae2a756d435ffb616a994ad8b6c31c0ae8929ce3e8c08de5693644377a1a5dc5377f3fc2d2ea7117b5552e56e577cb303dfe5c66778ec5c7db230be60893612027ef7badadd4f75b829f414876de685c27561409a6074127d30b0477911ea246acfa27b95f3ce48e61e023571f89edb346e8dcbe2af8c638eaac7768891834fd743b0cdc8c6309eb07d07fed80f6ea5e28da305373133804fa3cd49ae33ab5f186dc141e7c14e51f62afc48c9659ca79be4e9df1bab288987afef30bc03082c0abbdc288e5c06c8bff68a96b3c0f0c8fa3497dac041bfee518abf7e87788479b6f2b23398198f84d1651eecb1336c97ba3759dab21eb85ed331186e7d251ba812acd269f5cba53117a31d91c2410be5d1698761aa55ad7c6b4848330013967fa08cca0e0eb30003ac0e2a8a7e05e8348c0ee50ed067cc2a7e4ae1daea8be78db54f5bfe75e3472825397ec7d513652673374681ece3d3c2d5a4f7b359250b2db74208e4fa6166c5240d95ea68e36e6867e5b7c7457b5ae251a4bffc1a25296d9ab1b70b2d2c576a9b718c5d930cb0ea0f8af2c07d8a83ab679ccd33c7686867751b75d6873cb1857f5a8d5b92c0aeccac7e89e647cfdd26a65e936eb70b548708ab527c80201104f38298d1954a3e6e409644f5b644ce1993b7958ce831d40ba6a654f5227d7caf6ff629ed42568da32b20eb1fd6382de19f339446c52eab1d78b14b7a9ecbb74aa9c6ce5055eb40e011d8109da30d39c534aa4abed6d17a4ac0bef256589ad3b34a60d43532bfb2c65495dd2a87c20d9c1a2bf7a57ae20fa3bb64e8cfdce539981302104dcf44b023b9417705fc1c12670dc248d054e9942f081b8e1ab7ec9aea6b6a5182208be5bab6e0104670023fbc5989500c8c0dc0c2e05be1e4f5ec8dd637a3892d5497d92d4d80781f841a88d41ccc2fece6ca1fb2690645cd9ecc003cd55bb055a1aeed2addd75c1037fc4e2fb530a2066c7de5199c4efa1eda1617c445a894056756e688f69676342b0c839fafbaf92063199a16b2f0640dbbe6e37e969bb66e9c56d7b7994aac8c2656fdcc523c3fd720eeb6a611ec61d2e12589230c9c7b5eac62d5470262916625c7553ffa98f78b545d184a9ced019ef9a9d5f8bbbf41fd7ec69a757e5898b3971888243e0adf5caeb63968b906c875441746df023918a9d8e779cadb143e9bed94440dc92c708d73eaecc3cf8bab6cd0a14e2a0b2a540a1160ce6699907c387064680632b39d5195b60a854680ef1ffa7106ebca8313ce1174414cd0c669b24bc2170b20197e74b83c248f7ca87fee02cb42ae0d9a9405004bf092eaaf8831b0728ed6e0cc0e097aacdba56de5bb56729dc1733c4a1b0ae9dbe64dff53153f9a35f8696904a4af2a91c38139ada1a46083771f103b188d2d1304aaa0a4b0e1973f914a1a64ce7dd604be4cd20f2034c8d8db7d26df98d298cebb63249ad3a9a1bf4b2f82a00b336a00e9def254de118636cc48c1936a8cd692cc58e0e1e3b7e3c8c369b0514c2a2f53d2401cd34ebb3013c7f81a68f721b23c5a6489a4269ead71f8e612977fded78404f27c268edc66a5dfedd3987cc579b3cbfd9bdf294e7a096683d455e92adc8caa8f248be6d5d24318b36707e9d011487d5f1a23ab77e1080e2117c2288eb02118fcb1b9954697845a2a0d31664eb8695fded1f4ae7b0a14335071566be8ee957bf9ad78ca401d4b5cfa40314e2f955f6692867e2c2c59b15a1bfc8d57a717a99dc6a8e0380b2c280b2f0cf232f94604be1002b2cc26bee95893ec4028fe574cc66db1e6714fad977b66a6cbb96f2cc32f9c242f205730170891adc8e5044f7ee857b21eb9aec0b98490d717a572895088df7469880a1e0ad57b03bbb4cda570a87e4944ee9e9dc647590466bfe880060a6c8ac85f75112ddf1a345a40181069e26b51eb7708c4369505838ef62c40adcc06550d8db4a4bce4da86ca24d02391fe68ea9c7e23f84f022142165368f0760128e8bd3e7dee5b6757bd466398864ab13766e398ef8e28e7105b306b01752aecf311ef5483dadc9124577ebfd938a42c2e6a7c607e1d593e3f7bc5617c48bdfb14892ab13aa586518faede83e4e59fe5ac13759d269e609d249f105c691b59f66d8d129383ce44332b488b66ea356b933ab981a0cff20198662e8145294a48dfb01c3a1822c13c6d5b32b5d5341b08689c81df8592f5f28a45dcc8d2cfe036cbe7abc75e54e3b822ed957cc6d0034dd1c28c160ee98e952ae6b71b48e2e0a91b4923f92686de2f1161bdd3e495ed3f53dd7babfc274eecab06facd2dd8e7cbcc0606259419c70f6518a58ec1602c298cbe5b331f14ea7005a66ef057fa63f0eade4ace5362ebbbb9b2728f4082bbc3b71efb36786e91b65382bfb56816d4e1af3adb8c824560870ffaa8db0e43867a1d681a9fccbb28bac965bdd344388d04a1c70e93cada8883dc139564ef3d09f24c1fa070ff847dbd39b89697ae942d63ff00d0beed7f2eac81b4e7c89e0c8a3356a72722582b08286e415dafd91f54944a642f68fdaae4255209bc996934bec5418c29e77a356d1d37ae8d81e46a93829aef1aad0cdf434f0d87d23370ea787dfd74c8e3d38b7ceee72fe0c7760dd4c15ed374593cccd2e6291626df1a9f2fa716cd2f9548d41e5996b72d774210591cdb770c9b032d3e567e59cedfd17d57cf237e25bfd355d24ba03d2f4a014bb0b4080028e33e3d1fc0ec086222befc6b0c6e3323386df1293215bd183277c189c62f42e65bac8a9c70d088ddffcd787fb64c00255294467cf68c92889e074ef152807276a85471770d94502fe1a4", 0x1000}, {&(0x7f00000001c0)="6c8c648db6c32a8aa51f29e8cce0b40a1b35dcdfedeee0e514f7fff92f35dfde9a65e368ad7ca816bddce453c91437762767977ba533079a4dc5bf1c8912c380c3b4e08fe61a042265cdcf1d16b2f1b9dacbb7db211fbcbface58c1066ca0a792fad65b8d4ab40e174ac972e9c8b436feb8a875b67a2cfaf1a30ba47b2ab7867fc185514292ece6a4c5797", 0x8b}, {&(0x7f0000000280)="e80e57330747b80a108bb5c96d02ab5e18c2b95c57922ef81fc99c5a22a1afb2b322b7ce468413b60df53935baf51b04988276951636cdccd249a6a324aa049fa68655922d49bf4b213a94d291fdc76500dda3aaede382fa774876ca550ad8b4434bbc52", 0x64}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000300)="fd3187420ebea55592c26102ba5460c3150fbc9532ae5d33270a0bc7d209f180b631d7fd374646cbea154d51ce03a88306ff1e0111845460c073922c354c6fedfce6e47a1be8c8e0e96ed64cf5d3ffccabc59ce4f86f4beabc6012297924089ad140d58a", 0x64}], 0x8, &(0x7f0000002640)=ANY=[@ANYBLOB="280000000000000029000000390000003302020000000000fc000000000000000000000000000000480000000000000029000000370000003c0500000000000007200000000706970400a3000000000000006c5000000000000043000000000000000001000502000900000000000000280000000000000029000000390000002f020180000000002001000000000000000000000000000070000000000000002900000036000000880a0000000000000740000000020e8100040100000000000000530e0000000000000080ffffffffffffa80c000000000000fbb400000000000001000000000000006501000000000000000100071000000002021f0002040000000000000000200000000000000029000000040000002f000000000000000105000000216de9e1af935402b92a8c0960b6decb5d0a1420c98f073fbc13c5054067c93110dc7f1417afebfe1034cad64b9a0d56a0b6fdb6ca97e89cd9d40233c59474ca52d584563e93f5286b1cd807ac16de71c0aa3e9c8ba8e9596567e67fd636ba761f8eec7f1e4d0c26b7d938b3eec7ad7bd0728107e9272ffad1f6583d56fda4d6ff0b018f24234d89a55f10dc0a27c207245170a053d77908539ec22fb8d80e815e0605ec236b265908c5d7d63d081adfad46cf87a78b44c5be62d10a6da0ee5a6c0b30e6cdf8251a80dfe265"], 0x128}}], 0x1, 0x0) 18:21:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@noprefix}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:21:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) openat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x12a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) r3 = gettid() ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xf) fcntl$lock(r2, 0x25, &(0x7f0000000240)={0x1, 0x4, 0x9, 0x207, r3}) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') getdents64(0xffffffffffffff9c, &(0x7f0000000300)=""/200, 0xc8) r4 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r4, &(0x7f0000000200)='net/nfsfs\x00') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) 18:21:32 executing program 3: r0 = syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x800000003, 0xffffffffffffffff, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x800, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x6, 0x7, 0x0, 0x0, 0x0, 0x10001, 0x8002, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000300)}, 0x2, 0x8000, 0x8001, 0x6, 0x9, 0x401, 0x5, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r1, 0x3) setresuid(0xffffffffffffffff, r3, 0x0) r4 = getegid() setresgid(r4, r4, 0x0) r5 = getegid() setresgid(r5, r5, 0x0) setgid(r4) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32, @ANYBLOB="d21fe2011081ae1332d5b09d0d837baf90722ae74203636c331b98d2d681b2859dd683ee22bb07b21b7a5072ac7efefa6b72ca2750e3a95c7f127ffc", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="02000600", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="04007293f20a8d9d9b19abb9b312a56b846128f8c30e4eab2baee1b9228ce0a0c6a65adbc71e4c18568063e60792c1eaf212ba3c921bbf5c55cb5932a4bc9cf56f2c25cdc5f91dedf27229dfb59b5e561245eec02bf91cfcc42936793090560e3409346e9363a9679d1d4c07e7e3084122b5fc775dc149489b65122ea7af4fd59ccd2581b9ca5f4eaa9f0f52a098aecc62d51e8a9b659f9372f96c88a6204dfe52a57f53b7bf75430f101e", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB="10000000000000002000000000000000"], 0x74, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="7573657222bcd7b5760000008060c073797374656d2e706f444a66c6a6483ff09a3f4311959ecda3e09d10048305bd8534ea0938657698efe41a14b5e70043a89e859cb42369d10dbab26a6743a196b355d861f6825ee5ae27d356a045f7cc80da601e595fb1772b8cf87db50a8a5493da8c3ae4082facf03701290f4c360608acdeb4035ce30d499d96b6c8825085868ef0ce0de2052a0c7665fe6a59888fe207b4"]) mlockall(0x1) r6 = memfd_create(&(0x7f00000005c0)='\x00\xb3~\x1dF\xc7\'\x85`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n\xb2\xaf\xc5D\xa36\xa5\xf9\xc8g\xecD\xbe\x1e\x9d\t\x00O\xd9G\xf1\x1b\xe3\x88\x0e\xbc\x11\x89S\xf5t\xfd\x9c\xd7\xd7\xae5\xf7_\xb4\x94\xd1\x04\x99\x9aX\x17\xbenI?};\x1a\xd8w\x8cq\xeas\x04aIH\xdaF\x8d\'\x00'/113, 0x3) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r6, 0x0) 18:21:33 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/4096, 0x1000) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}}) lsetxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) getdents64(r1, &(0x7f0000000140)=""/145, 0x91) [ 192.466221] 9pnet: Insufficient options for proto=fd [ 192.515121] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 192.523548] 9pnet: Insufficient options for proto=fd 18:21:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80100200040000300000000000000010000000000000002000005", 0x30, 0x4000000000000004}, {0x0, 0x0, 0x802}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=system_u,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c66756e633d46494c455f4d4d41502c66756e633d4be84e455845435f494e495452414d46535f434845434b2c00"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xff, 0x121401) openat(r2, &(0x7f0000000140)='./file0\x00', 0x40000, 0xae) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0x30) [ 192.586609] cgroup: noprefix used incorrectly 18:21:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) openat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x12a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) r3 = gettid() ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xf) fcntl$lock(r2, 0x25, &(0x7f0000000240)={0x1, 0x4, 0x9, 0x207, r3}) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') getdents64(0xffffffffffffff9c, &(0x7f0000000300)=""/200, 0xc8) r4 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r4, &(0x7f0000000200)='net/nfsfs\x00') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) [ 192.645309] FAT-fs (loop2): Unrecognized mount option "fowner>00000000000000060929" or missing value 18:21:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) writev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000600)="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", 0x200}, {&(0x7f0000000400)="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", 0x200}], 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="00fb2a04232da2e997dfa847793187fbcf039bdb5d6466431a2774f58662963ea63b76a35a9000000000"], 0x2a, 0x1) 18:21:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)) ioctl$CDROMCLOSETRAY(r4, 0x5319) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r5 = fcntl$dupfd(r2, 0x406, r3) readlinkat(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/27, 0x1b) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x43) faccessat(r6, &(0x7f00000001c0)='./file0\x00', 0x109) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r7, r2, 0x0, 0x7ffffff9) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x81}, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x3, 0xffffffffffffffff, 0xb) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 192.741003] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 18:21:33 executing program 5: epoll_create(0x1) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x10, 0xffffffffffffffff, 0x8000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000a80)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000008c0)=""/205, 0xcd}], 0x1, &(0x7f00000009c0)=""/90, 0x5a}, 0x0, 0x0, 0x1, {0x0, r1}}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r3, 0x0, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f00000004c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007bbc859dda799d76651cde6dd0a321f979f2e92ee17d311e5d93ab9520f1b7b6d58a7f49c0e5a6da99e7d2ec212fa34b7205a9c6211c9adfcefa48347453189835872a75e6b4957677035fd386b1883091d7725464619cf9"]) preadv(r4, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) statx(r2, &(0x7f0000000600)='./file0\x00', 0x100, 0x400, &(0x7f00000007c0)) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000002600)={{0x3, 0x982835ce23499657, 0x6, 0x1, 0x6cb6, 0x7}, 0x176, [0x382, 0x1f, 0x9, 0xe07, 0xffff039b, 0x400, 0x40, 0x8000, 0xffff, 0x40000000, 0xbe49, 0xfff, 0x7f, 0x5, 0x400, 0x2, 0x4, 0x3, 0x4, 0x4, 0xfff, 0x0, 0x1, 0x0, 0xfffeffff, 0x6, 0xffff, 0xff, 0x1f, 0x80, 0x81, 0xfff, 0xc, 0xd70, 0x7fff, 0xfffffffa, 0x65e, 0x0, 0x4, 0x4, 0xfffffffc, 0x8, 0x7fffffff, 0xa22, 0x3f, 0xb2, 0x9, 0x2, 0x9, 0x1e0d, 0x8, 0x9, 0x80, 0x5496, 0x8000, 0x3, 0x3, 0xc176, 0x7, 0x9, 0x3, 0xed, 0x0, 0x7ff, 0x10000, 0x7f, 0xfffffffd, 0x8, 0x9, 0x2, 0x45, 0x1, 0x0, 0x5, 0xfffffff9, 0x80, 0x2, 0x7fff, 0x1, 0x5, 0x7, 0xc2, 0x80, 0x20, 0x7c2, 0x5, 0x9, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x400, 0xffffffff, 0x8, 0x1, 0x9, 0x0, 0x9dce, 0x4, 0x1, 0x6, 0x10001, 0x2, 0x80000000, 0x3, 0x2, 0x3, 0x9, 0x5, 0x80000000, 0x1, 0x2, 0x3, 0x1, 0x9, 0x200000, 0x0, 0x5, 0xffffffff, 0x9, 0xfffffffa, 0x0, 0x2, 0x800, 0x3, 0x2, 0xffffffc1, 0xffffffc1, 0x6, 0x6, 0x10000, 0xcea, 0x1, 0x9, 0x8, 0x2, 0xffffffff, 0x1, 0xfffffff7, 0x7, 0x3, 0x23dc, 0x80000000, 0x7, 0x30d, 0x4, 0x101, 0x3, 0x100, 0x7f, 0x7ff, 0xfffffffb, 0xec, 0xfff, 0x9, 0x6, 0x3a8c, 0xffffffff, 0x1000, 0xfffffff7, 0x1a1, 0x8, 0xffffffff, 0xfffffffc, 0x4, 0x81, 0x8, 0xb9, 0x6, 0xe00c, 0x81, 0x5, 0x7, 0x9, 0x1, 0x7, 0x40, 0x8, 0x7fffffff, 0x19a, 0x4, 0x6, 0x4, 0x800, 0x7af30bf7, 0x13d9, 0xfff, 0x0, 0x40, 0x3, 0x9, 0x200, 0x101, 0x100, 0x5, 0xdd0, 0x81, 0x1000, 0x4290, 0x3, 0x4, 0x8, 0x1, 0x6, 0x1, 0xe0000, 0x8, 0x2, 0x7c0, 0xfffffffa, 0x0, 0x1, 0x3ff, 0x7f, 0x1000, 0xffff, 0x2, 0x1, 0x3, 0xd4, 0x0, 0x5, 0x59f7, 0xd7e, 0x7, 0x9, 0x4, 0x773, 0xfffffffa, 0x40, 0x0, 0x2, 0x3f, 0x0, 0x1, 0x2, 0x2, 0x200, 0x4, 0x4, 0x0, 0x3, 0xabc, 0xcc, 0x183, 0x7, 0x8000, 0x3, 0x800, 0x6, 0x22976e47, 0x7, 0x2, 0x7, 0xbd24, 0x2, 0x80, 0x40, 0x401, 0x5, 0x6, 0x7, 0x1, 0x2fe6, 0x7, 0x0, 0x3, 0x95, 0x66, 0x5, 0x3ff, 0xbc7, 0x40, 0x1ff, 0x9, 0x1000, 0x200, 0x9, 0x80000000, 0x8, 0x7, 0x75, 0xfc, 0xba, 0x7, 0x3, 0x7fff, 0x4, 0x0, 0x3f, 0x9, 0x0, 0xc2b, 0x2, 0x6, 0x80000001, 0x4, 0x80000001, 0x2, 0x104, 0x1, 0x800, 0x968, 0x4, 0x1, 0x10000, 0x4, 0x8, 0x2, 0x2, 0x20, 0x2, 0x7fffffff, 0x1ff, 0x769, 0x4, 0x80000000, 0x0, 0x100, 0x80000001, 0x7, 0xe2b, 0x3, 0x0, 0x3, 0x3ff, 0x3ff, 0x1, 0x8000, 0x80000000, 0xd9, 0x2, 0x757, 0x6, 0x6, 0x93, 0x18, 0x4, 0x4, 0x0, 0x5, 0x20, 0x1, 0xfffffff9, 0x2, 0x8000, 0x6, 0x67, 0x4, 0x0, 0x4, 0x4, 0x9, 0xf13, 0x56, 0x4, 0x7dcd, 0xe1b, 0x9, 0x2, 0x9a, 0x4, 0xc0e, 0xfffffff7, 0x1, 0x2000, 0x452a7d1e, 0x100, 0x6, 0x6, 0x7f, 0x0, 0x4, 0x1, 0x7, 0x8, 0xfffffffb, 0x2, 0x9, 0x6, 0x5, 0x0, 0x6, 0x4, 0x40b, 0x3, 0x6, 0x1ff, 0x6, 0x5, 0x3, 0x6, 0x100, 0x8, 0xff, 0xfffffff8, 0x9, 0x5, 0x6, 0x5c3a, 0xfffffffa, 0x2, 0x0, 0x1f, 0x5, 0x4, 0xfffffff8, 0x0, 0x0, 0x6, 0x4, 0x89800, 0x8000, 0x6, 0x5, 0x3, 0x7, 0x2, 0x8000, 0x8d8, 0x1, 0x486, 0x6, 0x4, 0x1000, 0xa6a, 0x0, 0x1, 0x1, 0x80000000, 0x2, 0x3, 0x1000, 0x9, 0x56e, 0xffff3415, 0x11c, 0x400, 0x81, 0x6, 0x7b, 0x80, 0x200, 0x2, 0x5, 0x1, 0x8, 0x5, 0x4, 0x3, 0x200, 0x7fff, 0x9, 0x10000, 0x8f, 0x3ff, 0xf7, 0x7, 0x5, 0x0, 0x3, 0x5, 0x7, 0x1, 0x10000, 0x4, 0x1, 0x7, 0x8, 0x1f, 0x65, 0x2, 0x80, 0x1, 0x400, 0xe28c, 0x7f, 0x8, 0x6, 0xfffffff7, 0x2475, 0x7, 0x2, 0x7, 0x6, 0x1f, 0xfffffeff, 0x7ff, 0x100, 0x8, 0x1, 0x1, 0x6, 0x87f2, 0x7ec, 0x80000001, 0x7, 0x7fff, 0x8, 0x80, 0x8, 0x9, 0x9, 0x7da, 0x80, 0x1, 0x3, 0x81, 0x7947, 0x0, 0x4cca, 0x1, 0x8, 0x9, 0xfffffffb, 0x8000, 0x0, 0xfff, 0x9, 0x9, 0x88, 0xfff, 0x0, 0x7, 0x3f, 0x20, 0x10001, 0xa1, 0x0, 0x9, 0x8, 0x1f, 0x3, 0x477c, 0xcb9, 0x8, 0xfffeffff, 0x3f, 0x6, 0x8, 0x4, 0x0, 0x1, 0x6, 0xfff, 0xcd0, 0x2, 0x5, 0x6, 0xd421, 0x8000, 0x8001, 0x4, 0x6, 0x1, 0x20, 0x7f, 0x4e185794, 0x1, 0x7, 0xb7, 0x101, 0x9, 0x7b2, 0x1, 0xfffff194, 0x8, 0x8, 0x2, 0x2, 0xd606, 0x700, 0xfffffff7, 0x7, 0x1ff, 0x0, 0x0, 0x4, 0x8, 0x54f, 0x8, 0x0, 0x10001, 0x3, 0x80000001, 0x0, 0x6, 0xd0a, 0x9, 0x1f, 0x4, 0x80, 0x7fffffff, 0x100, 0xfffffff9, 0x9, 0x4, 0x3dbf, 0x8000, 0x8, 0x4, 0x800, 0x5b, 0x1000, 0x2, 0x8, 0x2, 0x0, 0x1, 0x10000, 0x80000000, 0xac, 0x2, 0x89f00000, 0x80000000, 0x3ff, 0x0, 0x1, 0x1ff, 0x7, 0x5, 0x0, 0x6, 0x3, 0x4, 0x3, 0x6, 0x4, 0x66a, 0x9, 0xfffffffb, 0x1ff, 0xffffffff, 0x9, 0x9, 0x9d3b, 0x9, 0x2, 0xc85, 0x7fffffff, 0x6c53570a, 0xffffc7b6, 0x4, 0x1, 0xbf7, 0xffff, 0x7, 0x3ff, 0x200, 0x3f, 0x3, 0x5019b6cf, 0x80000001, 0x0, 0x20, 0x3, 0x7, 0x4, 0x4a7, 0x7, 0x72, 0xd6a, 0x7, 0x3, 0x62db, 0x4d, 0x2, 0x2c0000, 0x9, 0x8cee, 0x2, 0x20000, 0x2, 0x1, 0x9, 0x9a8, 0x80000001, 0x7f, 0x7ff, 0x100, 0xfff, 0x2, 0x5, 0x1, 0x1, 0x3f, 0x1, 0xffffffff, 0x7, 0x68a, 0x0, 0xec1, 0x0, 0x5, 0x602b, 0x3f, 0x5, 0x8001, 0x8, 0x2a3, 0x4, 0x4, 0x200, 0x5b, 0x366, 0x40, 0x8001, 0x100, 0x8, 0x4, 0x8, 0x1, 0x2, 0x4, 0x8000, 0x2, 0x7ff, 0xa9f, 0x1, 0x1f, 0xdc, 0x5, 0x0, 0x1, 0xa2, 0x7, 0x7, 0x1, 0x9, 0x6, 0xe7, 0x0, 0x800, 0x101, 0x1, 0x81, 0xf79, 0x7, 0x40, 0x4, 0x3, 0x6, 0xce, 0x4, 0x5, 0x7, 0x3, 0xdad, 0x200, 0x2, 0xfff, 0x1, 0x80000000, 0x0, 0x100, 0x6, 0x1, 0xcb8a, 0x9, 0x0, 0x8, 0xab, 0x3ff, 0x7ff, 0x3, 0xffff, 0x7, 0x4, 0x95, 0x0, 0x0, 0x10000000, 0x5, 0xe987, 0x0, 0x3, 0x0, 0x800, 0x3ff, 0x0, 0x6, 0x7ff, 0x2, 0x0, 0x2, 0x2, 0x8b6, 0x3, 0xec37, 0x0, 0x10000, 0x0, 0x3, 0x10000000, 0x6, 0x7181, 0x6, 0xfff, 0x1, 0x1886, 0x400, 0x5, 0x8, 0x81, 0xe6, 0x12, 0x4, 0x3ff, 0x6, 0x5, 0x1, 0x8, 0x20, 0x4, 0x6, 0x1, 0x9, 0x3, 0x4, 0x8000, 0xb3, 0x4, 0x2, 0xfffffffd, 0x3ff, 0x8da5, 0x1ff, 0x9, 0x7, 0x7, 0x1c, 0x4, 0x8, 0x5c6, 0x5, 0x10001, 0x1c, 0x5, 0x7, 0x7, 0x9, 0x1, 0x7, 0x6, 0xb66, 0x200, 0x4, 0x4, 0x1f, 0x943a, 0x1, 0x8, 0x9, 0x7fff, 0x1, 0x6, 0x4, 0xe2, 0x5, 0xc056, 0x7, 0x1, 0x5, 0xec, 0x1, 0x20, 0x0, 0x11, 0x7ff, 0x9, 0x30, 0x4a, 0x1, 0x2, 0xfffffffd, 0x0, 0x194, 0x2, 0x80, 0x6, 0xe35, 0x9, 0x6, 0x81, 0xd6cd, 0x7, 0x200, 0x43, 0xff, 0xcefc, 0x4, 0x31fc, 0x80000001, 0x50d5035e, 0x81, 0x6, 0x7ff, 0x7fffffff, 0x4, 0x9c, 0x0, 0x0, 0x200, 0x1, 0x2, 0xfffffffb, 0x1, 0xffffffff, 0x743, 0xa8, 0x5, 0x5, 0x60, 0x8, 0x0, 0x5, 0x800, 0xf8000000, 0x6, 0x29, 0x7ce7, 0xfffffffd, 0x4, 0x3, 0xe7, 0x448a, 0x9, 0x80000000, 0xd54b, 0x1000, 0x8001, 0x7f, 0x86cb, 0x0, 0x4, 0x2, 0x6, 0x32, 0x85, 0x9, 0x3, 0xe9d, 0x3, 0xffffffff, 0xffffffff, 0x2, 0x7fffffff, 0x4, 0x9, 0x6, 0x3, 0x0, 0x63, 0x5, 0x80000000, 0x0, 0x8000, 0x1ff, 0x7, 0x7, 0x784, 0x60519d42, 0x163f, 0x14000000, 0x9791, 0x1, 0x4d6da4f7, 0x9, 0x7, 0x0, 0x7, 0x4, 0x1400, 0x0, 0x8000, 0xffff, 0x1, 0x8, 0x3ff, 0x7, 0x3, 0x8000, 0x5b63, 0x0, 0xe4, 0x65e, 0x81, 0x6, 0x3, 0x2243, 0x7468182a, 0x2, 0x9, 0x9, 0x8, 0xfff, 0x0, 0x80, 0x2, 0x8, 0xafcb156, 0x3f, 0x758f, 0xbfe, 0x7fff, 0x10000, 0x3, 0xcf0a, 0x673d, 0xba1, 0x2, 0x319d, 0x4, 0x0, 0x2, 0x8, 0x7, 0x3, 0x8001, 0x6, 0x0, 0x8, 0x20]}) io_uring_enter(0xffffffffffffffff, 0x291, 0x8074, 0x0, &(0x7f0000000ac0)={[0x6]}, 0x8) 18:21:33 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 18:21:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000000c0)}, 0x7}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/185, 0xb9}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000180)=""/44, 0x2c}, {&(0x7f0000000480)=""/51, 0x33}, {&(0x7f00000004c0)=""/29, 0x1d}], 0x6}, 0x15a}, {{&(0x7f0000000580)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/58, 0x3a}], 0x2, &(0x7f00000006c0)=""/119, 0x77}, 0x57d3}], 0x3, 0x2, &(0x7f0000000800)={0x77359400}) sendmsg$nl_generic(r1, &(0x7f0000001d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x1c, 0x24, 0x2, 0x70bd2c, 0x25dfdbfc, {0x10}, [@typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r3 = geteuid() r4 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r1, &(0x7f0000001c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000000880)={0x1380, 0x3a, 0x300, 0x70bd28, 0x25dfdbfb, {0x1f}, [@nested={0x1128, 0x34, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @uid}, @generic="8e05fd003e659d48345982d167d2079b491cb959e6560d488ee79e1e32fc0f7a2713726795ecc379877556aa1e678c894c2e852d65e4e14ba9e27fed804807b79f4785fe1623a0e0508f8eee8d09851b1d9af0439a9ba1dc28a673d2233f37abb5f1aae55e905d9b2dc8429ca019093ba48aad00a729fecc20cbc569c6a90e0f1e7aa4b62ce6cfada529045a96b2fe", @generic="60878681dbd4d84cce4fe32e4e1cf3f9b475ac96f7da47ebb85a632315957216fb0568e7b5a90e3cdcbe9cbbce0b93e7e2cefddd5e1ccbc04cda2d3730c85f23c7e62386aed74920cd1f05d13b9ee120683ec2c563719ca26fad8cbb05515d61237db49a4a6aa6fcc7a767", @generic="1a36", @generic="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", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@remote}, @typed={0x4, 0x37}, @typed={0x8, 0x84, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x84, 0x0, 0x0, @fd=r0}, @generic="2122516cf83528f8d66c0009d2d7414fe14436d57cca7ee81d7862f44dd520ec1ab4612fb6f6fc01b8c11ec32e39c816b3286f1c405c00198f72a5c3afda32dc938ac07070706a0713e43d63fc317d145b8c15", @typed={0x8, 0x68, 0x0, 0x0, @u32=0xaef}, @nested={0x34, 0x73, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @uid=r2}, @generic="8c1512a90b7c0920f87d8aac58e8283f5c5c5dd28d6409cd", @typed={0x8, 0x3, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x91, 0x0, 0x0, @pid=r4}]}, @nested={0x19a, 0x3a, 0x0, 0x1, [@generic="e3d8f5b19ed93f929cf13ae2b10f5c79a2b5f72c009c701865c58e89cf486b2e3a2d376404d74c7e0d66354a39268ed29a4b6a2c9157adca0ee4d921290618f2eee96442eaf910cf446142d65e23c3f2fc36d6e4ea8334619d4478dbedb7da4f7cf9f102d7272b0e9aba2d09af8f7a07391f3fbb2631c583ac090081b8acfe86180efeae78286c8d59bc137ec162bc2a3a043eb8b470c6612d77162f4ba57053", @generic="a73be8d1c3a44f638e25438274b00ed83f75077c0c88b28d8e53bf9527e4853fe8de087b8064163a106a0083d8d110dc29fc8246bf51fe6ccea916ab95608cfa9e2d08d28e7e490211104816d27f89b0544d1da738cae967d091b5db8b8421fa37d5a9d82c24533000f8a193da7509de9052e5df", @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x3}, @generic="a56e93638a04363385fd396da5c938790b384c7eba375f863a5f967a92e7bc0041947d8cecb620da7622e3931ca1cd587ddb5ccb01cdb5156a9eea6d5f6850fa581569663c4f8c59888a441710acafb1b194009f6a28255c881e8d5043d08080101eaf6c84e5f84bf90cbccc6a2cf84b4cfed3bb6e06cc78b01d"]}, @generic="e814b00e930a6fb5"]}, 0x1380}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x52, 0x400, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 192.868664] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.943924] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.037513] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz-executor.0: bad orphan inode 301979167 [ 193.041252] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 193.480246] FAT-fs (loop2): Unrecognized mount option "fowner>00000000000000060929" or missing value 18:21:45 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000240), &(0x7f0000000340)=@v1={0x1000000, [{0x6, 0x6}]}, 0xc, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x6c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "9eabda9816f53171c7"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 18:21:45 executing program 5: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = inotify_init1(0x0) pipe2(&(0x7f0000000180), 0x800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa4000004) inotify_rm_watch(r1, r3) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x4) pipe(&(0x7f0000000140)) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) r5 = inotify_init1(0x0) dup3(r5, r2, 0x0) fcntl$dupfd(r0, 0x406, r0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40086607, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100, 0x9}) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(0xffffffffffffffff, 0x0) 18:21:45 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x0, 0x7f, 0x10, 0x7fffffff}, {0x8, 0x4, 0x6, 0x7}, {0x8, 0x7, 0xf3, 0x8001}, {0x2, 0x1, 0x9, 0x4}, {0x600b, 0x8, 0x5, 0xfffffff8}]}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x8001, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbfffff1c7b22060ffff03"], 0x28}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) 18:21:45 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 205.144005] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 205.147326] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x820000, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @remote}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@mcast2, 0x18, r8}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:21:45 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 18:21:45 executing program 0: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00c567003e867364372f666903000000000000003000"]) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x13, 0x32, 0xa, 0x8, 0x9, 0x7, 0x6, 0x140, 0x57c371147aca7cca}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x1c, 0x0, 0x12, 0x4, 0x8f6, 0x1, 0x15b}) dup2(0xffffffffffffffff, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 18:21:45 executing program 7: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x810, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, 0x3010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x4010, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0x538f, &(0x7f0000000000)={0x0, 0x558c, 0x20, 0x3, 0x259}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x3000002, 0x10, r0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x62795dfae1b35338, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x62795dfae1b35338, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x62795dfae1b35338, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x62795dfae1b35338, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_complete(r7) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r9, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/164, 0xa4}], 0x4, &(0x7f00000004c0)=""/80, 0x50}, 0x0, 0x2001, 0x1, {0x1}}, 0xffffffff) [ 205.166148] kauditd_printk_skb: 1 callbacks suppressed [ 205.166159] audit: type=1400 audit(1672078905.737:20): avc: denied { watch_reads } for pid=4345 comm="syz-executor.5" path="/syzkaller-testdir316763163/syzkaller.5UnZ9b/10" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 18:21:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup2(r1, 0xffffffffffffffff) write(r1, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r3 = dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff}}, './file0\x00'}) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x1, 0x2) r5 = openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x20000, 0x0, 0x10}, 0x18) r6 = getpgrp(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@newspdinfo={0x24, 0x24, 0x8, 0x70bd29, 0x25dfdbfc, 0x80000001, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001e0001002bbd7000fbdbdf250800000008003b001e10b2c4616f57a2881fa3089312d07e237b3767508f626211583011daeab761e0b451", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4044) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) unshare(0x48020200) 18:21:45 executing program 5: accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x88) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x806, 0x5) ftruncate(r0, 0x1000003) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x1, 0x7fff, 0x0, 0x0, 0x7}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) openat$zero(0xffffffffffffff9c, 0x0, 0x100, 0x0) 18:21:45 executing program 3: geteuid() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)={'syz0', "f496656696e8ed3c54d5fbd439a227f3ee0295eedf04b70a550571cbf6ee7963d7270396fd29bb6b571ffd78235e4ec2717acaba1379c3dcd3d3ef15c515d4df559f8bee1bd22e999535fbe3d409dc9a44ec4f9cc95f8fcd9f8dcf18352f2cde521772d9a7619c4eec89273980562a0ef2a5eb06fbeb8caf8faabe127fb84b05585febaa37e2d9f1a1fb21582146fe8fd7e07e05ff582ee6814f2082"}, 0xa0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1d00000030003d0151f0c139ec7d00000000870000000065f5cf417ee1713a370c807b7ee49da2720f10428d508dc8516f2b7561daf26e97763bc05bbc48e0b7056b73089deb9e6dbcb1ed6a022217"], 0x1c}}, 0x0) pipe2$9p(0x0, 0x80000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) preadv(r3, &(0x7f00000016c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0) write$P9_RSTAT(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="490000007d020000004200ff03010400010304000000020000000000000000000100438200009e000000060000000000000001cec9f10236f7a9bd38032b1893dd4b1e1bba258b6514813c1b30c50da4752e9cbb398a70d23ce22bdbf4"], 0x49) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000001c0)={@dev}, &(0x7f0000000200)=0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000080)={'lo\x00'}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)) 18:21:45 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 205.384497] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz-executor.0: bad orphan inode 301979167 [ 205.386197] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 18:21:45 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) 18:21:46 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x0, 0x4}) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r3) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000002c0)={{r5}, 0x4, &(0x7f0000000240)=[0x7, 0x3f, 0x5, 0x3], 0x8, 0x3, [0x3, 0x6ffbe5a8, 0x0, 0x80000001]}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x3) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0x123) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000280)={0x279b3dfe, 0x0, 0x3, 0x80000000000009, 0xfffffffa, 0xfff}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000140)={0x3ff, 0x10, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) [ 205.465248] audit: type=1400 audit(1672078906.036:21): avc: denied { write } for pid=4391 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:21:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x820000, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @remote}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@mcast2, 0x18, r8}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:21:46 executing program 0: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00c567003e867364372f666903000000000000003000"]) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x13, 0x32, 0xa, 0x8, 0x9, 0x7, 0x6, 0x140, 0x57c371147aca7cca}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x1c, 0x0, 0x12, 0x4, 0x8f6, 0x1, 0x15b}) dup2(0xffffffffffffffff, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 18:21:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 18:21:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1421202ab700"], 0x14}}, 0x0) [ 205.606157] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:21:46 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) 18:21:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_enc_key_size={{0x1408, 0x2}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) [ 205.680914] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 664485374 (only 16 groups) 18:21:46 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) 18:21:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) [ 205.786325] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:21:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mode}]}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)={0x420081, 0x140}, 0x18) faccessat2(r0, &(0x7f0000000540)='./file0\x00', 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3fffffffc0000000, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="be85232a2e74b9db3cd861f6c7e95160f562a9f518ccabc3b69f832f7b945e9e7434b22c3c941a81a0cd8fd9fff657322974054a4634f5f506338bd9b489520b95d26c364bd25d1ac3f0b99375baec920deed603a0ab0e3af0fddce2d88961b254f925c2e91b75fcaf592a1d49686b5a3d", 0x71, 0x3d}, {&(0x7f0000000200)="bea7e924af797c84edd0d51449f830ea114ef0a98f307a9a35a77ec0be0e0fe89c2779efb3da7c35f8e4fdae14e8ca9a465e40f84531888d02db20561f6c3d2de7f499", 0x43, 0xc69}, {&(0x7f0000000280)="2edf252e4e5f9a9f042283bd32b3d39b17611bdcdc6fe524361f6b0c75c67f34142a098426adf43b3d365e8e75c2e3189eeb30385087cafcf208ea3210f64d9bd44e1432c15a007a035695993bd86e2701eed4e162984e5c96c570ca2ed646a27d047eb2a2dbd9b459c3fa26430924dfceae26d28e2c3fbd8a5397dd8ce7bbe8785cdaf304c73b670a5a688cfe3b4830ea9951f88e40b5a0c0e9704118c83daeffa2c0f5d69cb9333a4cf0c3cc9f96f395f9eef012d6d64cc3e87a9d4845e325c7984e853e014ba68c9a5a5f0547d8e16ee47ace597a", 0xd6, 0x200}], 0x2902021, &(0x7f0000000400)={[{@nobh}, {@dioread_lock}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@block_validity}, {@grpjquota}, {@jqfmt_vfsv1}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r1}}, {@uid_lt={'uid<', 0xee01}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) 18:21:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 205.870811] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:21:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]}) 18:21:46 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) 18:21:46 executing program 2: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) r3 = syz_io_uring_complete(0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f0000000040)) dup2(r1, r2) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) openat(r6, &(0x7f0000000200)='./file0\x00', 0x406000, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x2800, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:21:46 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mode}]}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)={0x420081, 0x140}, 0x18) faccessat2(r0, &(0x7f0000000540)='./file0\x00', 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x3fffffffc0000000, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="be85232a2e74b9db3cd861f6c7e95160f562a9f518ccabc3b69f832f7b945e9e7434b22c3c941a81a0cd8fd9fff657322974054a4634f5f506338bd9b489520b95d26c364bd25d1ac3f0b99375baec920deed603a0ab0e3af0fddce2d88961b254f925c2e91b75fcaf592a1d49686b5a3d", 0x71, 0x3d}, {&(0x7f0000000200)="bea7e924af797c84edd0d51449f830ea114ef0a98f307a9a35a77ec0be0e0fe89c2779efb3da7c35f8e4fdae14e8ca9a465e40f84531888d02db20561f6c3d2de7f499", 0x43, 0xc69}, {&(0x7f0000000280)="2edf252e4e5f9a9f042283bd32b3d39b17611bdcdc6fe524361f6b0c75c67f34142a098426adf43b3d365e8e75c2e3189eeb30385087cafcf208ea3210f64d9bd44e1432c15a007a035695993bd86e2701eed4e162984e5c96c570ca2ed646a27d047eb2a2dbd9b459c3fa26430924dfceae26d28e2c3fbd8a5397dd8ce7bbe8785cdaf304c73b670a5a688cfe3b4830ea9951f88e40b5a0c0e9704118c83daeffa2c0f5d69cb9333a4cf0c3cc9f96f395f9eef012d6d64cc3e87a9d4845e325c7984e853e014ba68c9a5a5f0547d8e16ee47ace597a", 0xd6, 0x200}], 0x2902021, &(0x7f0000000400)={[{@nobh}, {@dioread_lock}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@block_validity}, {@grpjquota}, {@jqfmt_vfsv1}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r1}}, {@uid_lt={'uid<', 0xee01}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) 18:21:46 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) keyctl$set_reqkey_keyring(0xe, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) [ 206.450294] EXT4-fs: failed to create workqueue [ 206.451418] EXT4-fs (loop0): mount failed 18:21:57 executing program 0: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00c567003e867364372f666903000000000000003000"]) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)={0x13, 0x32, 0xa, 0x8, 0x9, 0x7, 0x6, 0x140, 0x57c371147aca7cca}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x1c, 0x0, 0x12, 0x4, 0x8f6, 0x1, 0x15b}) dup2(0xffffffffffffffff, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 18:21:57 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x0, 0x4}) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r3) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000002c0)={{r5}, 0x4, &(0x7f0000000240)=[0x7, 0x3f, 0x5, 0x3], 0x8, 0x3, [0x3, 0x6ffbe5a8, 0x0, 0x80000001]}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x3) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0x123) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000280)={0x279b3dfe, 0x0, 0x3, 0x80000000000009, 0xfffffffa, 0xfff}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000140)={0x3ff, 0x10, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) 18:21:57 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) keyctl$set_reqkey_keyring(0xe, 0x0) 18:21:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0xfff, 0x6, &(0x7f0000000780)=[{&(0x7f00000001c0)="aff4d961269d6fad48149c3890d6f4bb790e1c97b1d7646fbf15383bd335057a31539f127370d10f7cce87412a5b8ab0d429d21c572a16663bc53b11655428c924062679a0a54e2d0bf95d3a5856d78a6378469f91e2a11c644c5dd68a2bf0013acd3f799943b3715c6e9ac19b0e603737e28f", 0x73, 0x1}, {&(0x7f0000000380)="ffe4d72a10341c5816a6eca37effe63f88aa8dbf0b900908fb18db0efa450ae7c510a1f0cda8299f4f10a44d0cbb6423c8395f6254bd37efb2e93635fd376da99603dfab0cc742100409d7950aec732001c528b7ec6bc7a4d9a2131d6944ca8e02d176781b455385024ff736", 0x6c, 0x8000}, {&(0x7f0000000400)="f50348912740eecb771589ec5fd967aeaf02851933160489a351d04f196dacfdb79440fe61058bf9c482147cc87b277831f2f7e3113976ef121f02487b8528d21dbc264fdffc70e75ebe114bb6e47aac211bfde2424aa40ebc7288f6e6546837b90ab6bcab844326212087308e53761e7e750f5e1b47c744e655f1baf9165bebbcc187afe3d5ce52e2983e", 0x8b, 0x40}, {&(0x7f00000004c0)="3827a52d208a32a3d5d825769c08e0739b31d038b2c5d6e0f60bf961ccd8e5f1cad3c1b86e7320d9c9a015ded4dcfa5e439a5fafc3324eb9230795f0cee4618ec2546eddb0ea2948063f8fd866574dc8593d501a01339063a4e713c7fde6e1c8536816255164b895f6d8348551fdf66322a9227cb80695218bc875226626550393646e219c6fc623619f2b737ef60138ef4742e8cf62240d6eed0c4a03f5891a7689311a009a5779c09b9e0e2692b4eec0c4c0899bfbd5d20b88f9111520384eab8f37fe3f42ecd0e6e7dde0f5006509878757", 0xd3, 0x7f}, {&(0x7f00000005c0)="e6aee418e349f4f06e35bcbfc0644831978d92a710f3ac3703fb8d2d8d2f1cd51d1060992353a6deceb020801266925b7d11aed62a623e0c69e6c543092900ee9ba22f59144080fe43ac2311394de284c4441e8582ad74dd1dbad0f664f5901618a21c74f8874dd00c32cd10553168cc28b1731d000df859c91de90e20314fc3f5bf6ef3b4fdbb500040bb3af063f2a4d106e1faa461635c30382ac937e6a6dcaff14d07086fb5dde0dbcfcf80ed1d335a56d93f3ac861a68f4505ca020dacf2b68efa0a0f85512e5cf064ea3626d97711a7cf2b2e93f275e58f9d29", 0xdc, 0x9}, {&(0x7f00000006c0)="03e5f762ff9a639e90429214ee155eb15f8f9a5bae13c82f4ca94d958ce27b19991f8c10fb4a6fbc9a0d195b367127ad451d6f43b97282b2843be8dd79238e70a4e186e3bf57064409b2b5013a92435f4095933b059de0fbd6658c12b3777af3f120cf71fa7ef2dcac977261baf9515fdade5767a11ecbdcb164af6b61fad4a23acc49f15a330f75ca0dbfe04dd8a052ff49c7da", 0x94, 0x3224}], 0x1002008, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 18:21:57 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x16, &(0x7f0000000100)=""/20, &(0x7f0000000180)=0x14) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 18:21:57 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) 18:21:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 18:21:57 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 217.179808] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 217.182292] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:21:57 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) keyctl$set_reqkey_keyring(0xe, 0x0) 18:21:57 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:21:57 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r5, 0x0, 0x806, 0x0) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r4) ioctl$LOOP_SET_STATUS(r3, 0x541b, 0x0) [ 217.304300] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 664485374 (only 16 groups) 18:21:57 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 18:21:58 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) 18:21:58 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) [ 217.523293] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz-executor.0: bad orphan inode 301979167 [ 217.527998] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 18:21:58 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 18:21:58 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x16, &(0x7f0000000100)=""/20, &(0x7f0000000180)=0x14) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 18:22:11 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) 18:22:11 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x666602, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000380)='btrfs\x00', 0x2083824, &(0x7f00000003c0)='9p\x00') perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x5, 0x5, 0x0, 0x80, 0x0, 0xb0, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x7}, 0x4502, 0x1f, 0x5, 0x6, 0x3, 0x400, 0x4, 0x0, 0x2534, 0x0, 0x544}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = dup2(r0, r0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000240)={{r7}, 0x2, &(0x7f0000000080)=[0x4, 0x41], 0x1000, 0x1, [0xb7a2000, 0x80000001, 0x1, 0x8000]}) sendfile(r4, r2, 0x0, 0x7ffffff9) 18:22:11 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) [ 230.933383] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:11 executing program 3: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 18:22:11 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:11 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x0, 0x4}) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r3) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000002c0)={{r5}, 0x4, &(0x7f0000000240)=[0x7, 0x3f, 0x5, 0x3], 0x8, 0x3, [0x3, 0x6ffbe5a8, 0x0, 0x80000001]}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x3) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0x123) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000280)={0x279b3dfe, 0x0, 0x3, 0x80000000000009, 0xfffffffa, 0xfff}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000140)={0x3ff, 0x10, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) [ 231.015331] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 231.026461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 231.177478] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 664485374 (only 16 groups) 18:22:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="041f000000061a"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff8000, @remote, 0x9}, 0x1c) 18:22:22 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) 18:22:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 18:22:22 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:22 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:22 executing program 3: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='\x00\xb7\x0e\x99\x9b\xdb\'', 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 18:22:22 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:22 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x0, 0x4}) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r3) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000002c0)={{r5}, 0x4, &(0x7f0000000240)=[0x7, 0x3f, 0x5, 0x3], 0x8, 0x3, [0x3, 0x6ffbe5a8, 0x0, 0x80000001]}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x3) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0x123) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000280)={0x279b3dfe, 0x0, 0x3, 0x80000000000009, 0xfffffffa, 0xfff}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000140)={0x3ff, 0x10, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) [ 242.305795] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:22:22 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 242.345086] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:22 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r0, @ANYBLOB="ff150000050000002f2f66699ff66c65"]) [ 242.417596] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:22:22 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="041f000000061a"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff8000, @remote, 0x9}, 0x1c) 18:22:23 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 242.472601] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 242.474522] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 664485374 (only 16 groups) 18:22:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="041f000000061a"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff8000, @remote, 0x9}, 0x1c) 18:22:23 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) 18:22:23 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="041f000000061a"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff8000, @remote, 0x9}, 0x1c) [ 242.613562] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="041f000000061a"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff8000, @remote, 0x9}, 0x1c) [ 242.646047] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 253.950713] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:22:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwrite64(r2, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) 18:22:34 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:34 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x0, 0x4}) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r3) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000002c0)={{r5}, 0x4, &(0x7f0000000240)=[0x7, 0x3f, 0x5, 0x3], 0x8, 0x3, [0x3, 0x6ffbe5a8, 0x0, 0x80000001]}) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x3) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4200, 0x123) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000280)={0x279b3dfe, 0x0, 0x3, 0x80000000000009, 0xfffffffa, 0xfff}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000140)={0x3ff, 0x10, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) 18:22:34 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:34 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) 18:22:34 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="041f000000061a"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff8000, @remote, 0x9}, 0x1c) 18:22:34 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 253.974770] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:34 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 254.015162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:22:34 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:34 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 254.057991] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:22:34 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 254.082011] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 254.085533] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 664485374 (only 16 groups) 18:22:34 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 254.149030] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:22:34 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 254.163894] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:34 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:34 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 254.241967] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.245137] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:22:47 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:47 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:22:47 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:47 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 18:22:47 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:47 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:47 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) [ 267.061303] 9pnet: Insufficient options for proto=fd [ 267.078323] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 267.098337] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 267.099604] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.112258] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 267.125328] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:22:47 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 267.272304] 9pnet: Insufficient options for proto=fd 18:22:47 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 267.432679] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:59 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:22:59 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:22:59 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:59 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:59 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:22:59 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:22:59 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 279.333528] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.358324] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:22:59 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 279.382364] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 279.385002] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 279.397122] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:22:59 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:22:59 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) 18:23:00 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 279.499461] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:23:00 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 279.518377] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:00 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:00 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:00 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:00 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:23:00 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 18:23:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 18:23:12 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:12 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 18:23:13 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) 18:23:13 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:13 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:13 executing program 0: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:23:13 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:13 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 292.491808] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 292.553023] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:23:13 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 18:23:13 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:13 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) 18:23:13 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:13 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:13 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:13 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) 18:23:26 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 306.191754] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:23:26 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:26 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:26 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:26 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:26 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 306.197142] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:23:26 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) 18:23:26 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 306.244029] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 306.273303] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.294408] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:23:26 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:26 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 306.323971] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.332184] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:23:26 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 306.379455] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:23:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:23:39 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) 18:23:39 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:39 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:39 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:39 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) 18:23:39 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 318.584057] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 318.631679] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:39 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:39 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:39 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:39 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:39 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:39 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) 18:23:39 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:39 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 319.254848] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.277753] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:23:51 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:51 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:51 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:23:51 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:23:51 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:51 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 330.976162] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.042731] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:51 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 331.082904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 331.117072] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:23:51 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:51 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:51 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:51 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 331.387550] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 331.409924] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 331.436422] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:23:52 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:52 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:23:52 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:23:52 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 331.716758] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 331.727374] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.759068] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:23:52 executing program 7: clone3(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:23:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 331.973734] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:24:05 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:05 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) epoll_create1(0x0) 18:24:05 executing program 7: clone3(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:24:05 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:05 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:05 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:05 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 345.341060] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:24:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 345.458893] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:24:06 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:06 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') close(0xffffffffffffffff) 18:24:06 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:06 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:06 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:06 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 345.736429] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:24:06 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') close(0xffffffffffffffff) 18:24:06 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 345.898503] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:24:18 executing program 7: clone3(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:24:18 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:24:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') close(0xffffffffffffffff) 18:24:18 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:18 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:18 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:18 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:18 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 357.741965] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.801411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:24:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:18 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 357.953647] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 371.194044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:24:31 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:31 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:31 executing program 7: clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:24:31 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:31 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:24:31 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:31 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 371.242970] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 371.246972] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 371.253143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:24:31 executing program 2: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:31 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:31 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:24:31 executing program 2: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 371.320532] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:24:31 executing program 2: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:31 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 371.388143] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:24:31 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 371.400532] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 371.423154] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:24:45 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:45 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:45 executing program 7: clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:24:45 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:45 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:45 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:45 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:45 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:45 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:45 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:45 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:45 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 385.397122] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:24:46 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:46 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 385.571318] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:24:56 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:56 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:56 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:56 executing program 7: clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:24:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:56 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:24:56 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:24:56 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 395.709945] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.727406] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 395.749718] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:24:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:24:56 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 395.797815] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (11 blocks) [ 395.838143] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:24:56 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:24:56 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:24:56 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:24:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 395.929950] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (11 blocks) 18:24:56 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 395.965570] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:25:10 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 409.925261] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:25:10 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:10 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:10 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:25:10 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:25:10 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:25:10 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:25:10 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:10 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:10 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 410.010609] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.016170] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 410.023209] EXT4-fs (loop2): bad geometry: block count 256 exceeds size of device (11 blocks) 18:25:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:25:10 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:25:10 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:10 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 410.124609] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:25:10 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 410.171861] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:25:22 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:25:22 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:22 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:25:22 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, r3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:25:22 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:22 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:25:22 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 421.521640] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:25:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:25:22 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 421.591644] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:25:22 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:25:22 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:22 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:25:22 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:22 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, r3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 421.739797] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 421.748050] EXT4-fs (loop2): get root inode failed [ 421.748848] EXT4-fs (loop2): mount failed 18:25:22 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:22 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:22 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:25:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:25:22 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 421.934091] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 422.024514] EXT4-fs (loop2): get root inode failed [ 422.025870] EXT4-fs (loop2): mount failed 18:25:35 executing program 5: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:35 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:25:35 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:35 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:25:35 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:25:35 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, r3) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 435.107078] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:25:35 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 435.119145] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:25:35 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:35 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 435.181711] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 435.199848] EXT4-fs (loop2): get root inode failed [ 435.200473] EXT4-fs (loop2): mount failed 18:25:48 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:25:48 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:25:48 executing program 3: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:48 executing program 5: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:48 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:48 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:25:48 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {0x0, 0x0, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 448.318280] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.321245] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:25:48 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:48 executing program 5: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:25:48 executing program 3: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 448.409028] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:25:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 448.427234] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 448.446534] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.452053] EXT4-fs (loop2): get root inode failed [ 448.453362] EXT4-fs (loop2): mount failed 18:25:49 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r1, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:25:49 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:25:49 executing program 3: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:25:49 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:25:49 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 448.582439] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 459.810158] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:26:00 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {0x0, 0x0, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:00 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:00 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:26:00 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:26:00 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 459.829918] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 459.854005] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated 18:26:00 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) [ 459.856452] EXT4-fs (loop2): get root inode failed [ 459.857009] EXT4-fs (loop2): mount failed 18:26:00 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:26:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {0x0, 0x0, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:26:00 executing program 6: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:00 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 459.982138] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 459.989938] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 459.991397] EXT4-fs (loop2): get root inode failed [ 459.991982] EXT4-fs (loop2): mount failed 18:26:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:00 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:00 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 460.073202] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:26:00 executing program 4: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 460.091233] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.128478] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 472.295333] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:26:12 executing program 5: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:26:12 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) dup2(r1, r2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:26:12 executing program 4: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:12 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:26:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:12 executing program 6: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:12 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 472.324231] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 472.329776] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 472.334089] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:26:12 executing program 4: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 472.353134] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:26:12 executing program 5: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 472.369920] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 472.371585] EXT4-fs (loop2): get root inode failed [ 472.372154] EXT4-fs (loop2): mount failed [ 472.431210] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:26:23 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:23 executing program 4: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:23 executing program 5: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:26:23 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, 0x0) 18:26:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:24 executing program 6: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:24 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) dup2(r1, r2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:26:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00), 0x0, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 483.445778] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.451376] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:26:24 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, 0x0) 18:26:24 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 483.481795] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 483.484690] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:26:24 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 483.515014] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated 18:26:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 483.570757] EXT4-fs (loop2): get root inode failed [ 483.572255] EXT4-fs (loop2): mount failed [ 483.608678] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:26:24 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, 0x0) 18:26:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:24 executing program 0: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 483.784530] perf: interrupt took too long (2564 > 2500), lowering kernel.perf_event_max_sample_rate to 78000 18:26:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 483.801085] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:26:24 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 483.819248] perf: interrupt took too long (3210 > 3205), lowering kernel.perf_event_max_sample_rate to 62000 [ 483.887932] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.912535] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 483.926983] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 483.945790] EXT4-fs (loop2): get root inode failed [ 483.947045] EXT4-fs (loop2): mount failed 18:26:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f465", 0xf, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:35 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 18:26:35 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:26:35 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) dup2(r1, r2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:26:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:35 executing program 0: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 494.871506] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.887212] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:26:35 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 494.910078] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 494.920792] perf: interrupt took too long (4030 > 4012), lowering kernel.perf_event_max_sample_rate to 49000 [ 494.931005] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 494.933232] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:26:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 494.946269] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 494.969319] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:26:35 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) [ 494.982401] EXT4-fs (loop2): get root inode failed [ 494.983661] EXT4-fs (loop2): mount failed 18:26:35 executing program 0: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:35 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 495.052100] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.073402] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 495.091518] 9pnet: Insufficient options for proto=fd [ 495.105329] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:26:35 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) dup2(r1, r2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:26:35 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 495.141856] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:26:35 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 495.239223] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 495.254082] EXT4-fs (loop2): get root inode failed [ 495.255221] EXT4-fs (loop2): mount failed 18:26:46 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 18:26:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:46 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:46 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:26:46 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) dup2(r1, r2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) [ 505.973770] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 505.975207] EXT4-fs (loop2): get root inode failed [ 505.975793] EXT4-fs (loop2): mount failed [ 505.988174] __nla_validate_parse: 3 callbacks suppressed [ 505.988184] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:26:46 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 505.996721] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 505.998188] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 506.000923] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.025945] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:26:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 506.050051] 9pnet: Insufficient options for proto=fd 18:26:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:46 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:46 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 18:26:46 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:26:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 506.100271] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 506.106849] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 506.108484] EXT4-fs (loop2): get root inode failed [ 506.109239] EXT4-fs (loop2): mount failed [ 506.174215] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 506.177697] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.205423] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 509.433363] kworker/dying (7) used greatest stack depth: 24104 bytes left 18:26:58 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:58 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:26:58 executing program 6: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:26:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:26:58 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 18:26:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 517.551323] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:26:58 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) dup2(r1, r2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) [ 517.571343] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 517.576524] 9pnet: Insufficient options for proto=fd [ 517.579975] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 517.584560] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:26:58 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:26:58 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 517.625814] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 517.630984] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 517.632497] EXT4-fs (loop2): get root inode failed [ 517.633071] EXT4-fs (loop2): mount failed [ 517.660416] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:26:58 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:58 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:26:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 517.688403] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:26:58 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 517.710200] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 517.713344] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:26:58 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:26:58 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:26:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 517.766922] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 517.782178] EXT4-fs (loop2): get root inode failed [ 517.783351] EXT4-fs (loop2): mount failed [ 517.811434] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:27:09 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 529.245039] __nla_validate_parse: 1 callbacks suppressed [ 529.245051] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 529.252470] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 529.260022] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:27:09 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:27:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:09 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:27:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:27:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 529.273823] perf: interrupt took too long (5049 > 5037), lowering kernel.perf_event_max_sample_rate to 39000 [ 529.298169] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 529.299260] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 529.327895] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated 18:27:09 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 529.342942] EXT4-fs (loop2): get root inode failed [ 529.344508] EXT4-fs (loop2): mount failed 18:27:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:27:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:09 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:27:10 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:10 executing program 1: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 529.456312] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 529.495761] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.501332] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 529.504558] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.504875] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:27:24 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 543.646855] __nla_validate_parse: 1 callbacks suppressed [ 543.646866] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.677050] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:27:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:24 executing program 1: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:27:24 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:27:24 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 543.688580] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 543.694772] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 543.702730] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 543.722009] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 543.729074] EXT4-fs (loop2): mount failed 18:27:24 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:27:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 543.753177] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:27:24 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 543.775972] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:27:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:24 executing program 1: dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 543.838270] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:27:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:27:24 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 543.887650] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 543.894559] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 543.962250] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 543.963388] EXT4-fs (loop2): mount failed 18:27:34 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:27:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:34 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:27:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:34 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:27:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 554.328941] __nla_validate_parse: 1 callbacks suppressed [ 554.328957] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.329099] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 554.335371] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 554.349561] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:27:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 554.382782] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 554.383434] EXT4-fs (loop2): mount failed 18:27:34 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:27:34 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 554.429402] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:27:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:35 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) [ 554.478027] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 554.480210] EXT4-fs (loop2): get root inode failed [ 554.480850] EXT4-fs (loop2): mount failed 18:27:35 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:27:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 554.511223] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:27:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 554.590303] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 554.594121] EXT4-fs (loop2): get root inode failed [ 554.594918] EXT4-fs (loop2): mount failed 18:27:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 566.431237] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:27:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:27:47 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:27:47 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:27:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:27:47 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:27:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:27:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 566.503746] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:27:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 566.558701] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 566.562432] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.582931] EXT4-fs (loop2): get root inode failed [ 566.584315] EXT4-fs (loop2): mount failed 18:27:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:27:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:27:47 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 566.718188] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:28:00 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:28:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 579.516186] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:00 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 579.551680] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 579.554172] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:28:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:11 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:28:11 executing program 1: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 590.772232] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:11 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 590.861441] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:28:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:28:11 executing program 1: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 590.990505] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:11 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:11 executing program 1: dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:11 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 591.179920] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:23 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:28:23 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:23 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {0x0, 0x0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:23 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 603.081776] perf: interrupt took too long (6317 > 6311), lowering kernel.perf_event_max_sample_rate to 31000 [ 603.083212] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 603.083855] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:23 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:28:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500), 0x0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 603.313934] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 603.320375] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:28:34 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:34 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500), 0x0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:34 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:28:34 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:28:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 614.310409] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 614.378043] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 614.394376] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:28:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:46 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:46 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:28:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500), 0x0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 626.352679] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 626.354600] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:28:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 626.428360] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 626.527717] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 626.537986] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:28:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:28:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:28:59 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:28:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:28:59 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:59 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:28:59 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 639.364076] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:28:59 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:28:59 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 639.421488] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:28:59 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:00 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:29:00 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:29:00 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 639.669540] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:29:00 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 639.717782] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 639.722263] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 639.752329] 9pnet: Insufficient options for proto=fd 18:29:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:11 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:11 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:29:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:12 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 651.463234] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:29:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:12 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 651.512179] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 651.514333] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:25 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:29:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:25 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:25 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:29:25 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 664.641448] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 664.652100] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 664.674185] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:25 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:25 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:29:25 executing program 7: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:29:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:25 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:29:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 664.878556] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:29:25 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:25 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 664.966372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 664.996708] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:36 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:29:36 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:36 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:29:36 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:29:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 675.941096] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:29:36 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) [ 675.985156] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:29:36 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 676.029449] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 676.093724] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:36 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:29:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 676.291527] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 676.308222] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 676.366730] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 676.371155] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:29:47 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:47 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:47 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:29:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:47 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 687.055167] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.056131] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:29:47 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) [ 687.102816] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 687.109962] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:29:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:47 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 687.223366] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:29:47 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:29:47 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:47 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) [ 687.276907] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 687.290264] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 [ 687.304156] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.350199] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.383983] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:29:59 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x806, 0x0) ftruncate(r1, 0x1000003) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r1) 18:29:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:59 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:59 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 699.133467] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:29:59 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:29:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 699.162489] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.164076] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 699.175561] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 699.178369] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 699.186940] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:29:59 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:29:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 699.269986] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:29:59 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:59 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:29:59 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:29:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:29:59 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) [ 699.388412] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 699.390371] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 699.424044] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:30:12 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:30:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:30:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:12 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:12 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:30:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 711.582527] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 711.618213] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 711.625528] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 711.628488] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 [ 711.633412] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 711.636040] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 711.646189] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:30:12 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:30:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 711.661447] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:30:12 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:30:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 711.776122] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:30:12 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 711.809373] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 711.823510] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 711.833010] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 711.839364] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 [ 711.844095] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:30:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:24 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:24 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:24 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:30:24 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ftruncate(r2, 0x1000003) dup2(r2, r3) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r2) 18:30:24 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 724.339097] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.356231] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 724.358420] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 724.365476] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 724.371126] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 724.378574] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 724.414136] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 724.422696] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:30:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:30:25 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:25 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:25 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 724.514988] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 724.526083] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:30:25 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 724.589053] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 724.602039] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:30:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:30:25 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:25 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 724.756976] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 724.778784] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:30:43 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup(0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:30:43 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:43 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:43 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 743.214038] __nla_validate_parse: 7 callbacks suppressed [ 743.214050] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.219989] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.233048] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 743.251149] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 743.268088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 743.291431] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 743.297687] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:30:43 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:43 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 743.374062] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.431999] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:30:55 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:55 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:55 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:30:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:30:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:55 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 755.096001] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:30:55 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 755.110205] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 755.116223] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 755.121187] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 755.130138] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 755.155730] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:30:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 755.165991] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:30:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 755.192314] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:30:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 755.225072] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:30:55 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 755.242055] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:30:55 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 755.288158] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:30:55 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:30:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:30:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:30:55 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:30:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 755.332203] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:30:55 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 755.377536] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 755.391121] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:31:07 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:31:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:07 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:31:07 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:07 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:07 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 766.606476] __nla_validate_parse: 4 callbacks suppressed [ 766.606485] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 766.633366] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:07 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000000014000400000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 766.647096] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.649413] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 766.655559] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 766.670072] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 766.718650] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 766.722865] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:31:18 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 777.805046] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:18 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:18 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:31:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000000014000400000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:18 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 777.823984] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 777.826285] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 777.852029] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 777.860032] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 777.871548] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:18 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000000014000400000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 777.942440] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:31:18 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 777.964078] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:31:18 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:18 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 778.017421] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:31:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 778.020427] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 778.028555] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:30 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:30 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:31:30 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000000014000400000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 789.484052] __nla_validate_parse: 3 callbacks suppressed [ 789.484066] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 789.490081] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.496048] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 789.498067] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 789.506094] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 789.510371] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:31:30 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:30 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 789.612151] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:31:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 789.679244] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 789.690042] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:31:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:30 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:31:30 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 789.738076] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 789.761052] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:30 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:31:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:30 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 789.947931] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 18:31:42 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000000014000400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:31:42 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:31:42 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:42 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 802.311512] __nla_validate_parse: 5 callbacks suppressed [ 802.311525] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 802.315014] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 802.320544] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 802.324179] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 802.328172] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 802.338081] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 802.380657] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 802.406216] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:31:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c000180140200000000000005000000000000000000000014000400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:54 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 814.003932] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 814.009033] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 814.012510] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:54 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:54 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:31:54 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 814.016169] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 814.021157] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 814.046314] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 814.071473] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 814.081101] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 [ 814.085087] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 814.088288] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:54 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:54 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:31:54 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 814.153497] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:31:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 814.178422] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:31:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:54 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:31:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:31:54 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:31:54 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:31:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 814.344744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 814.371193] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 18:32:06 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:32:06 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:32:06 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:32:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 825.973547] __nla_validate_parse: 11 callbacks suppressed [ 825.973555] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 825.976524] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 825.978075] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 825.982161] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 825.988248] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:32:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 825.994012] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 826.016570] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:32:06 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:06 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) 18:32:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 826.042572] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 826.050485] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:32:06 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 826.062890] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=1 [ 826.083571] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 826.103474] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:32:06 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) 18:32:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:18 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) 18:32:18 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:32:18 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:18 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:32:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:32:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 837.830412] __nla_validate_parse: 3 callbacks suppressed [ 837.830424] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 837.844050] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 837.847083] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 837.848303] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 837.862204] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:32:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 837.875038] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 837.898275] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:32:18 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:18 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 837.936573] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 837.948264] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 838.005208] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 838.010429] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:32:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:30 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 850.172182] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 850.181017] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.191460] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 850.196231] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:32:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:32:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 18:32:30 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:30 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:32:30 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 850.217124] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 850.217155] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 850.221497] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 850.264164] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 850.282474] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=9 18:32:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:30 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:30 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x4) 18:32:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:32:30 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 18:32:30 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x0, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 850.391311] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 850.428504] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:32:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 850.442205] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 850.455440] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 18:32:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:32:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 850.560363] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 850.568988] EXT4-fs error (device loop2): __ext4_new_inode:1068: comm syz-executor.2: reserved inode found cleared - inode=9 18:32:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 18:32:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 850.746649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 850.771586] EXT4-fs (loop2): inodes count not valid: 65535 vs 32 [ 850.785997] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=9 [ 864.483450] __nla_validate_parse: 7 callbacks suppressed [ 864.483457] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:32:45 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:45 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x0, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:45 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 864.495539] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:32:45 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', 0x0, 0xffffffffffffffff) 18:32:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 864.513061] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:32:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) [ 864.515493] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 864.529802] EXT4-fs (loop2): inodes count not valid: 65535 vs 32 [ 864.530003] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 864.534052] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 864.541202] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:32:45 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:32:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:32:45 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 864.615479] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 864.623993] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 864.627812] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:32:45 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 864.653734] EXT4-fs (loop2): inodes count not valid: 65535 vs 32 18:32:45 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x0, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', 0x0, 0xffffffffffffffff) 18:32:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:32:45 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:32:58 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:58 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:32:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', 0x0, 0xffffffffffffffff) 18:32:58 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:58 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 877.915056] __nla_validate_parse: 6 callbacks suppressed [ 877.915068] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:32:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 877.936574] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 877.939026] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 877.947160] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 877.949228] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 877.959972] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 877.967469] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 877.969377] EXT4-fs (loop2): group descriptors corrupted! 18:32:58 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:58 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:32:58 executing program 3: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:32:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:32:58 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 878.137502] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 878.146447] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 878.148976] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 878.152203] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 878.157561] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 878.159532] EXT4-fs (loop2): group descriptors corrupted! [ 890.089591] FAULT_INJECTION: forcing a failure. [ 890.089591] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 890.091206] CPU: 0 PID: 7129 Comm: syz-executor.3 Not tainted 5.10.161 #1 18:33:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 1) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:33:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 890.091933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.093047] Call Trace: [ 890.093340] dump_stack+0x107/0x167 [ 890.093741] should_fail.cold+0x5/0xa [ 890.094155] _copy_from_user+0x2e/0x1b0 [ 890.094582] __copy_msghdr_from_user+0x91/0x4b0 [ 890.095081] ? __ia32_sys_shutdown+0x80/0x80 [ 890.095554] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.096123] ? __lock_acquire+0x1657/0x5b00 [ 890.096604] ? __lock_acquire+0xbb1/0x5b00 [ 890.097063] sendmsg_copy_msghdr+0xa1/0x160 [ 890.097523] ? do_recvmmsg+0x6d0/0x6d0 [ 890.097939] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.098507] ? lock_downgrade+0x6d0/0x6d0 18:33:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 890.098952] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.099579] ___sys_sendmsg+0xc6/0x170 [ 890.099998] ? sendmsg_copy_msghdr+0x160/0x160 [ 890.100496] ? __fget_files+0x26d/0x480 [ 890.100936] ? lock_downgrade+0x6d0/0x6d0 [ 890.101393] ? find_held_lock+0x2c/0x110 [ 890.101832] ? __fget_files+0x296/0x480 [ 890.102272] ? __fget_light+0xea/0x290 [ 890.102696] __sys_sendmsg+0xe5/0x1b0 [ 890.103111] ? __sys_sendmsg_sock+0xb0/0xb0 [ 890.103576] ? rcu_read_lock_any_held+0x75/0xa0 [ 890.104071] ? fput_many+0x2f/0x1a0 [ 890.104468] ? ksys_write+0x1a9/0x260 [ 890.104886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.105447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.105995] ? trace_hardirqs_on+0x5b/0x180 [ 890.106458] do_syscall_64+0x33/0x40 [ 890.106865] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 890.107412] RIP: 0033:0x7fbdc24f2b19 [ 890.107811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.109782] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.110593] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 890.111369] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 890.112130] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.112926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.113713] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 890.120515] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:33:10 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file1\x00'}) 18:33:10 executing program 5: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:10 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:10 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="041f000000061a"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff8000, @remote, 0x9}, 0x1c) 18:33:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 890.151400] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:33:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 890.172128] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 890.180519] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 890.183561] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 890.185636] EXT4-fs (loop2): group descriptors corrupted! 18:33:10 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 890.260097] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:33:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 890.272284] FAULT_INJECTION: forcing a failure. [ 890.272284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.273588] CPU: 0 PID: 7152 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 890.274326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.275214] Call Trace: [ 890.275506] dump_stack+0x107/0x167 [ 890.275905] should_fail.cold+0x5/0xa [ 890.276321] _copy_from_user+0x2e/0x1b0 [ 890.276775] __copy_msghdr_from_user+0x91/0x4b0 [ 890.277278] ? __ia32_sys_shutdown+0x80/0x80 [ 890.277748] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.278313] ? __lock_acquire+0x1657/0x5b00 [ 890.278799] ? __lock_acquire+0xbb1/0x5b00 [ 890.279251] sendmsg_copy_msghdr+0xa1/0x160 [ 890.279718] ? do_recvmmsg+0x6d0/0x6d0 [ 890.280150] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.280712] ? lock_downgrade+0x6d0/0x6d0 [ 890.281151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.281727] ___sys_sendmsg+0xc6/0x170 [ 890.282153] ? sendmsg_copy_msghdr+0x160/0x160 [ 890.282653] ? __fget_files+0x26d/0x480 [ 890.283097] ? lock_downgrade+0x6d0/0x6d0 [ 890.283543] ? find_held_lock+0x2c/0x110 [ 890.283985] ? __fget_files+0x296/0x480 [ 890.284426] ? __fget_light+0xea/0x290 [ 890.284864] __sys_sendmsg+0xe5/0x1b0 [ 890.285297] ? __sys_sendmsg_sock+0xb0/0xb0 [ 890.285759] ? rcu_read_lock_any_held+0x75/0xa0 [ 890.286271] ? fput_many+0x2f/0x1a0 [ 890.286656] ? ksys_write+0x1a9/0x260 [ 890.287085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.287639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.288210] ? trace_hardirqs_on+0x5b/0x180 [ 890.288698] do_syscall_64+0x33/0x40 [ 890.289107] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 890.289647] RIP: 0033:0x7ff678c61b19 [ 890.290056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.292041] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.292885] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 890.293640] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 890.294422] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.295198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.295956] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 18:33:10 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 1) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 2) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:33:10 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) [ 890.311201] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:33:10 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 890.340169] FAULT_INJECTION: forcing a failure. [ 890.340169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.341876] CPU: 0 PID: 7158 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 890.342608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.343481] Call Trace: [ 890.343773] dump_stack+0x107/0x167 [ 890.344171] should_fail.cold+0x5/0xa [ 890.344589] _copy_from_user+0x2e/0x1b0 [ 890.345022] iovec_from_user+0x141/0x400 [ 890.345462] __import_iovec+0x67/0x590 [ 890.345893] ? __ia32_sys_shutdown+0x80/0x80 [ 890.346367] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.346935] import_iovec+0x83/0xb0 [ 890.347338] sendmsg_copy_msghdr+0x131/0x160 [ 890.347811] ? do_recvmmsg+0x6d0/0x6d0 [ 890.348228] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.348808] ? lock_downgrade+0x6d0/0x6d0 [ 890.349260] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.349834] ___sys_sendmsg+0xc6/0x170 [ 890.350261] ? sendmsg_copy_msghdr+0x160/0x160 [ 890.350757] ? __fget_files+0x26d/0x480 [ 890.351185] ? lock_downgrade+0x6d0/0x6d0 [ 890.351636] ? find_held_lock+0x2c/0x110 [ 890.352081] ? __fget_files+0x296/0x480 [ 890.352529] ? __fget_light+0xea/0x290 [ 890.352956] __sys_sendmsg+0xe5/0x1b0 [ 890.353364] ? __sys_sendmsg_sock+0xb0/0xb0 [ 890.353830] ? rcu_read_lock_any_held+0x75/0xa0 [ 890.354338] ? fput_many+0x2f/0x1a0 [ 890.354743] ? ksys_write+0x1a9/0x260 [ 890.355168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.355745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.356316] ? trace_hardirqs_on+0x5b/0x180 [ 890.356805] do_syscall_64+0x33/0x40 [ 890.357218] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 890.357780] RIP: 0033:0x7fbdc24f2b19 [ 890.358187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.360191] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.361032] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 890.361809] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 890.362585] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.363358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.364136] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 18:33:10 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 890.384298] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 890.386334] EXT4-fs (loop2): group descriptors corrupted! [ 890.389136] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 890.416485] FAULT_INJECTION: forcing a failure. [ 890.416485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.419427] CPU: 1 PID: 7163 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 890.420900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.422668] Call Trace: [ 890.423240] dump_stack+0x107/0x167 [ 890.424024] should_fail.cold+0x5/0xa [ 890.424868] _copy_from_user+0x2e/0x1b0 [ 890.425728] __copy_msghdr_from_user+0x91/0x4b0 [ 890.426720] ? __ia32_sys_shutdown+0x80/0x80 [ 890.427666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.428790] ? __lock_acquire+0x1657/0x5b00 18:33:11 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 3) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 890.429716] ? __lock_acquire+0xbb1/0x5b00 [ 890.430750] sendmsg_copy_msghdr+0xa1/0x160 [ 890.431668] ? do_recvmmsg+0x6d0/0x6d0 [ 890.432501] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 18:33:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 890.433650] ? lock_downgrade+0x6d0/0x6d0 [ 890.434640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.435778] ___sys_sendmsg+0xc6/0x170 [ 890.436627] ? sendmsg_copy_msghdr+0x160/0x160 [ 890.437602] ? __fget_files+0x26d/0x480 [ 890.438451] ? lock_downgrade+0x6d0/0x6d0 [ 890.439345] ? find_held_lock+0x2c/0x110 [ 890.440219] ? __fget_files+0x296/0x480 [ 890.441089] ? __fget_light+0xea/0x290 [ 890.441928] __sys_sendmsg+0xe5/0x1b0 [ 890.442741] ? __sys_sendmsg_sock+0xb0/0xb0 [ 890.443659] ? rcu_read_lock_any_held+0x75/0xa0 [ 890.444678] ? fput_many+0x2f/0x1a0 [ 890.445458] ? ksys_write+0x1a9/0x260 [ 890.446277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.447399] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.448494] ? trace_hardirqs_on+0x5b/0x180 [ 890.449433] do_syscall_64+0x33/0x40 [ 890.450241] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 890.451348] RIP: 0033:0x7f8817f78b19 [ 890.452157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.452170] FAULT_INJECTION: forcing a failure. [ 890.452170] name failslab, interval 1, probability 0, space 0, times 1 [ 890.456119] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.456144] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 890.456155] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 890.456165] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.456176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.456187] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 890.462549] FAULT_INJECTION: forcing a failure. [ 890.462549] name failslab, interval 1, probability 0, space 0, times 1 [ 890.462837] CPU: 0 PID: 7176 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 890.465903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.466794] Call Trace: [ 890.467081] dump_stack+0x107/0x167 [ 890.467478] should_fail.cold+0x5/0xa [ 890.467905] ? __alloc_skb+0x6d/0x620 [ 890.468331] should_failslab+0x5/0x20 [ 890.468774] kmem_cache_alloc_node+0x55/0x370 [ 890.469276] __alloc_skb+0x6d/0x620 [ 890.469673] netlink_sendmsg+0x98e/0xdf0 [ 890.470122] ? netlink_unicast+0x7f0/0x7f0 [ 890.470590] ? netlink_unicast+0x7f0/0x7f0 [ 890.471059] sock_sendmsg+0x154/0x190 [ 890.471480] ____sys_sendmsg+0x70d/0x870 [ 890.471931] ? kernel_sendmsg+0x50/0x50 [ 890.472369] ? do_recvmmsg+0x6d0/0x6d0 [ 890.472795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.473380] ? lock_downgrade+0x6d0/0x6d0 [ 890.473824] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 890.474405] ___sys_sendmsg+0xf3/0x170 [ 890.474821] ? sendmsg_copy_msghdr+0x160/0x160 [ 890.475344] ? lock_downgrade+0x6d0/0x6d0 [ 890.475795] ? find_held_lock+0x2c/0x110 [ 890.476252] ? __fget_files+0x296/0x480 [ 890.476688] ? __fget_light+0xea/0x290 [ 890.477130] __sys_sendmsg+0xe5/0x1b0 [ 890.477551] ? __sys_sendmsg_sock+0xb0/0xb0 [ 890.478032] ? rcu_read_lock_any_held+0x75/0xa0 [ 890.478554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.479136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.479711] ? trace_hardirqs_on+0x5b/0x180 [ 890.480187] do_syscall_64+0x33/0x40 [ 890.480606] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 890.481175] RIP: 0033:0x7fbdc24f2b19 [ 890.481580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.483619] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.484425] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 890.485219] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 890.485999] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.486780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.487557] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 890.488364] CPU: 1 PID: 7165 Comm: syz-executor.4 Not tainted 5.10.161 #1 [ 890.489868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 890.491630] Call Trace: [ 890.492203] dump_stack+0x107/0x167 [ 890.493013] should_fail.cold+0x5/0xa [ 890.493843] should_failslab+0x5/0x20 [ 890.494660] __kmalloc_track_caller+0x79/0x3c0 [ 890.495631] ? strndup_user+0x74/0xe0 [ 890.496453] memdup_user+0x22/0xd0 [ 890.497231] strndup_user+0x74/0xe0 [ 890.498012] __x64_sys_mount+0x133/0x300 [ 890.498879] ? copy_mnt_ns+0xa00/0xa00 [ 890.499722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 890.500844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 890.501944] do_syscall_64+0x33/0x40 [ 890.502743] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 890.503840] RIP: 0033:0x7f0e90cc1b19 [ 890.504655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.508567] RSP: 002b:00007f0e8e237188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 890.510195] RAX: ffffffffffffffda RBX: 00007f0e90dd4f60 RCX: 00007f0e90cc1b19 [ 890.511712] RDX: 0000000020000300 RSI: 0000000020000180 RDI: 0000000000000000 [ 890.513239] RBP: 00007f0e8e2371d0 R08: 0000000020000340 R09: 0000000000000000 [ 890.514752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.516265] R13: 00007ffffe8ca2bf R14: 00007f0e8e237300 R15: 0000000000022000 [ 890.552159] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 902.325536] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 902.351170] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 902.351721] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:33:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:33:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:33:22 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 2) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:22 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 4) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:33:22 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:33:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:33:22 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 902.356646] FAULT_INJECTION: forcing a failure. [ 902.356646] name failslab, interval 1, probability 0, space 0, times 0 [ 902.359255] CPU: 1 PID: 7196 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 902.359454] FAULT_INJECTION: forcing a failure. [ 902.359454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.360745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.360752] Call Trace: [ 902.360781] dump_stack+0x107/0x167 [ 902.360804] should_fail.cold+0x5/0xa [ 902.365976] ? create_object.isra.0+0x3a/0xa20 [ 902.366973] should_failslab+0x5/0x20 [ 902.367801] kmem_cache_alloc+0x5b/0x360 [ 902.368688] create_object.isra.0+0x3a/0xa20 [ 902.369673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 902.370800] kmem_cache_alloc_node+0x169/0x370 [ 902.371798] __alloc_skb+0x6d/0x620 [ 902.372597] netlink_sendmsg+0x98e/0xdf0 [ 902.373498] ? netlink_unicast+0x7f0/0x7f0 [ 902.374433] ? netlink_unicast+0x7f0/0x7f0 [ 902.375360] sock_sendmsg+0x154/0x190 [ 902.376191] ____sys_sendmsg+0x70d/0x870 [ 902.377089] ? kernel_sendmsg+0x50/0x50 [ 902.378001] ? do_recvmmsg+0x6d0/0x6d0 [ 902.378848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.380016] ? lock_downgrade+0x6d0/0x6d0 [ 902.380946] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.382132] ___sys_sendmsg+0xf3/0x170 [ 902.382987] ? sendmsg_copy_msghdr+0x160/0x160 [ 902.384011] ? lock_downgrade+0x6d0/0x6d0 [ 902.384929] ? find_held_lock+0x2c/0x110 [ 902.385854] ? __fget_files+0x296/0x480 [ 902.386727] ? __fget_light+0xea/0x290 [ 902.387646] __sys_sendmsg+0xe5/0x1b0 [ 902.388489] ? __sys_sendmsg_sock+0xb0/0xb0 [ 902.389429] ? rcu_read_lock_any_held+0x75/0xa0 [ 902.390485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 902.391619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 902.392806] ? trace_hardirqs_on+0x5b/0x180 [ 902.393745] do_syscall_64+0x33/0x40 [ 902.394609] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 902.395720] RIP: 0033:0x7fbdc24f2b19 [ 902.396565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.400585] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.402329] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 902.403891] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 902.405501] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.407054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.408714] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 902.410289] CPU: 0 PID: 7202 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 902.411024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.411910] Call Trace: [ 902.412200] dump_stack+0x107/0x167 [ 902.412594] should_fail.cold+0x5/0xa [ 902.413019] _copy_from_user+0x2e/0x1b0 [ 902.413449] iovec_from_user+0x141/0x400 [ 902.413886] __import_iovec+0x67/0x590 [ 902.414302] ? __ia32_sys_shutdown+0x80/0x80 [ 902.414774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.415339] import_iovec+0x83/0xb0 [ 902.415732] sendmsg_copy_msghdr+0x131/0x160 [ 902.416202] ? do_recvmmsg+0x6d0/0x6d0 [ 902.416623] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.417194] ? lock_downgrade+0x6d0/0x6d0 [ 902.417640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.418204] ___sys_sendmsg+0xc6/0x170 [ 902.418620] ? sendmsg_copy_msghdr+0x160/0x160 [ 902.419109] ? __fget_files+0x26d/0x480 [ 902.419533] ? lock_downgrade+0x6d0/0x6d0 [ 902.419978] ? find_held_lock+0x2c/0x110 [ 902.420416] ? __fget_files+0x296/0x480 [ 902.420855] ? __fget_light+0xea/0x290 [ 902.421275] __sys_sendmsg+0xe5/0x1b0 [ 902.421682] ? __sys_sendmsg_sock+0xb0/0xb0 [ 902.422145] ? rcu_read_lock_any_held+0x75/0xa0 [ 902.422642] ? fput_many+0x2f/0x1a0 [ 902.423037] ? ksys_write+0x1a9/0x260 [ 902.423446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 902.424016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 902.424565] ? trace_hardirqs_on+0x5b/0x180 [ 902.425039] do_syscall_64+0x33/0x40 [ 902.425442] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 902.425991] RIP: 0033:0x7ff678c61b19 [ 902.426391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.428370] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.429205] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 902.429960] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 902.430727] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.431476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.432234] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 902.441440] FAULT_INJECTION: forcing a failure. [ 902.441440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.444322] CPU: 1 PID: 7198 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 902.445826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.447611] Call Trace: [ 902.448186] dump_stack+0x107/0x167 [ 902.448987] should_fail.cold+0x5/0xa [ 902.449818] _copy_from_user+0x2e/0x1b0 [ 902.450685] iovec_from_user+0x141/0x400 [ 902.451566] __import_iovec+0x67/0x590 [ 902.452401] ? __ia32_sys_shutdown+0x80/0x80 [ 902.453370] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.454536] import_iovec+0x83/0xb0 [ 902.455341] sendmsg_copy_msghdr+0x131/0x160 [ 902.456309] ? do_recvmmsg+0x6d0/0x6d0 [ 902.457189] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 18:33:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) [ 902.458342] ? lock_downgrade+0x6d0/0x6d0 [ 902.459416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 902.460556] ___sys_sendmsg+0xc6/0x170 [ 902.461419] ? sendmsg_copy_msghdr+0x160/0x160 [ 902.462423] ? __fget_files+0x26d/0x480 [ 902.463299] ? lock_downgrade+0x6d0/0x6d0 [ 902.464201] ? find_held_lock+0x2c/0x110 [ 902.465127] ? __fget_files+0x296/0x480 [ 902.466012] ? __fget_light+0xea/0x290 [ 902.466875] __sys_sendmsg+0xe5/0x1b0 [ 902.467711] ? __sys_sendmsg_sock+0xb0/0xb0 [ 902.468650] ? rcu_read_lock_any_held+0x75/0xa0 [ 902.469687] ? fput_many+0x2f/0x1a0 [ 902.470486] ? ksys_write+0x1a9/0x260 [ 902.471324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 902.472479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 902.473619] ? trace_hardirqs_on+0x5b/0x180 [ 902.474598] do_syscall_64+0x33/0x40 [ 902.475421] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 902.476537] RIP: 0033:0x7f8817f78b19 [ 902.477344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.481358] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.483102] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 902.484665] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 902.485786] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 902.486227] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.486239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.486250] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 18:33:23 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 902.524511] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 902.529583] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 902.530638] EXT4-fs (loop2): group descriptors corrupted! [ 902.540864] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:33:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:33:35 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 3) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:35 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 914.603010] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 914.617582] FAULT_INJECTION: forcing a failure. [ 914.617582] name failslab, interval 1, probability 0, space 0, times 0 [ 914.619189] CPU: 1 PID: 7230 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 914.619962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.620848] Call Trace: [ 914.621156] dump_stack+0x107/0x167 [ 914.621555] should_fail.cold+0x5/0xa [ 914.621970] ? __alloc_skb+0x6d/0x620 [ 914.622392] should_failslab+0x5/0x20 [ 914.622813] kmem_cache_alloc_node+0x55/0x370 [ 914.623020] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 914.623293] __alloc_skb+0x6d/0x620 [ 914.625553] netlink_sendmsg+0x98e/0xdf0 [ 914.625995] ? netlink_unicast+0x7f0/0x7f0 [ 914.626453] ? netlink_unicast+0x7f0/0x7f0 [ 914.626929] sock_sendmsg+0x154/0x190 [ 914.627358] ____sys_sendmsg+0x70d/0x870 [ 914.627791] ? kernel_sendmsg+0x50/0x50 [ 914.628221] ? do_recvmmsg+0x6d0/0x6d0 [ 914.628635] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.629213] ? lock_downgrade+0x6d0/0x6d0 [ 914.629663] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.630237] ___sys_sendmsg+0xf3/0x170 [ 914.630669] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.631175] ? lock_downgrade+0x6d0/0x6d0 [ 914.631648] ? find_held_lock+0x2c/0x110 [ 914.632101] ? __fget_files+0x296/0x480 [ 914.632548] ? __fget_light+0xea/0x290 [ 914.632998] __sys_sendmsg+0xe5/0x1b0 [ 914.633415] ? __sys_sendmsg_sock+0xb0/0xb0 [ 914.633877] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.634402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.634994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.635564] ? trace_hardirqs_on+0x5b/0x180 [ 914.636040] do_syscall_64+0x33/0x40 [ 914.636454] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 914.637032] RIP: 0033:0x7ff678c61b19 [ 914.637448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.639429] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.640301] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 914.641118] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 914.641944] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.642770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:33:35 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 5) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:33:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:33:35 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x40) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:33:35 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 914.643740] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 914.664074] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 914.667232] FAULT_INJECTION: forcing a failure. [ 914.667232] name failslab, interval 1, probability 0, space 0, times 0 [ 914.668290] FAULT_INJECTION: forcing a failure. [ 914.668290] name failslab, interval 1, probability 0, space 0, times 0 [ 914.668457] CPU: 1 PID: 7236 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 914.671560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.672443] Call Trace: [ 914.672724] dump_stack+0x107/0x167 [ 914.673121] should_fail.cold+0x5/0xa [ 914.673526] should_failslab+0x5/0x20 [ 914.673939] __kmalloc_node_track_caller+0x74/0x3f0 [ 914.674478] ? netlink_sendmsg+0x98e/0xdf0 [ 914.674932] __alloc_skb+0xb1/0x620 [ 914.675323] netlink_sendmsg+0x98e/0xdf0 [ 914.675770] ? netlink_unicast+0x7f0/0x7f0 [ 914.676239] ? netlink_unicast+0x7f0/0x7f0 [ 914.676705] sock_sendmsg+0x154/0x190 [ 914.677137] ____sys_sendmsg+0x70d/0x870 [ 914.677588] ? kernel_sendmsg+0x50/0x50 [ 914.678018] ? do_recvmmsg+0x6d0/0x6d0 [ 914.678450] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.679017] ? lock_downgrade+0x6d0/0x6d0 [ 914.679469] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.680040] ___sys_sendmsg+0xf3/0x170 [ 914.680462] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.680980] ? lock_downgrade+0x6d0/0x6d0 [ 914.681437] ? find_held_lock+0x2c/0x110 [ 914.681896] ? __fget_files+0x296/0x480 [ 914.682328] ? __fget_light+0xea/0x290 [ 914.682771] __sys_sendmsg+0xe5/0x1b0 [ 914.683185] ? __sys_sendmsg_sock+0xb0/0xb0 [ 914.683655] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.684167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.684731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.685281] ? trace_hardirqs_on+0x5b/0x180 [ 914.685758] do_syscall_64+0x33/0x40 [ 914.686162] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 914.686714] RIP: 0033:0x7fbdc24f2b19 [ 914.687116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.689100] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.689918] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 914.690686] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 914.691459] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.692245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.693033] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 914.693965] CPU: 0 PID: 7235 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 914.695445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.697254] Call Trace: [ 914.697828] dump_stack+0x107/0x167 [ 914.698617] should_fail.cold+0x5/0xa [ 914.699440] ? __alloc_skb+0x6d/0x620 [ 914.700271] should_failslab+0x5/0x20 [ 914.701110] kmem_cache_alloc_node+0x55/0x370 [ 914.702087] __alloc_skb+0x6d/0x620 [ 914.702879] netlink_sendmsg+0x98e/0xdf0 [ 914.703773] ? netlink_unicast+0x7f0/0x7f0 [ 914.704705] ? netlink_unicast+0x7f0/0x7f0 [ 914.705651] sock_sendmsg+0x154/0x190 [ 914.706479] ____sys_sendmsg+0x70d/0x870 [ 914.707374] ? kernel_sendmsg+0x50/0x50 [ 914.708243] ? do_recvmmsg+0x6d0/0x6d0 [ 914.709116] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.710284] ? lock_downgrade+0x6d0/0x6d0 [ 914.711203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.712366] ___sys_sendmsg+0xf3/0x170 [ 914.713225] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.714220] ? lock_downgrade+0x6d0/0x6d0 [ 914.715132] ? find_held_lock+0x2c/0x110 [ 914.716027] ? __fget_files+0x296/0x480 [ 914.716917] ? __fget_light+0xea/0x290 [ 914.717772] __sys_sendmsg+0xe5/0x1b0 [ 914.718600] ? __sys_sendmsg_sock+0xb0/0xb0 [ 914.719538] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.720565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.721727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.722850] ? trace_hardirqs_on+0x5b/0x180 [ 914.723784] do_syscall_64+0x33/0x40 [ 914.724600] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 914.725727] RIP: 0033:0x7f8817f78b19 [ 914.726543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.730560] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.732231] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 914.733791] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 914.735338] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.736898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.738463] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 914.741637] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 914.742682] EXT4-fs (loop2): group descriptors corrupted! 18:33:35 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) creat(&(0x7f0000000000)='./file1\x00', 0x130) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="3072e939969218f751a430b12328df828721212ea8d8a37a882bb24a15bcf394bcdd274cb127bbe9e87c529a004290e48a072b1d6613bf6a5c4830ab9973129d22c8"]) 18:33:35 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 914.770027] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:33:35 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:35 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 4) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 1) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) [ 914.819378] FAULT_INJECTION: forcing a failure. [ 914.819378] name failslab, interval 1, probability 0, space 0, times 0 [ 914.821383] CPU: 1 PID: 7255 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 914.822315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.823440] Call Trace: [ 914.823799] dump_stack+0x107/0x167 [ 914.824311] should_fail.cold+0x5/0xa [ 914.824847] ? create_object.isra.0+0x3a/0xa20 [ 914.825483] should_failslab+0x5/0x20 [ 914.826014] kmem_cache_alloc+0x5b/0x360 [ 914.826587] create_object.isra.0+0x3a/0xa20 [ 914.827199] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 914.827906] kmem_cache_alloc_node+0x169/0x370 [ 914.828519] __alloc_skb+0x6d/0x620 [ 914.829178] netlink_sendmsg+0x98e/0xdf0 [ 914.830193] ? netlink_unicast+0x7f0/0x7f0 [ 914.831256] ? netlink_unicast+0x7f0/0x7f0 [ 914.832274] sock_sendmsg+0x154/0x190 [ 914.833259] ____sys_sendmsg+0x70d/0x870 [ 914.834257] ? kernel_sendmsg+0x50/0x50 [ 914.835214] ? do_recvmmsg+0x6d0/0x6d0 18:33:35 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 914.836159] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.837337] ? lock_downgrade+0x6d0/0x6d0 [ 914.837902] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.838654] ___sys_sendmsg+0xf3/0x170 [ 914.839180] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.839819] ? lock_downgrade+0x6d0/0x6d0 [ 914.840398] ? find_held_lock+0x2c/0x110 [ 914.840986] ? __fget_files+0x296/0x480 [ 914.841551] ? __fget_light+0xea/0x290 [ 914.842093] __sys_sendmsg+0xe5/0x1b0 [ 914.842631] ? __sys_sendmsg_sock+0xb0/0xb0 [ 914.843217] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.843886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.844602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.845370] ? trace_hardirqs_on+0x5b/0x180 [ 914.845978] do_syscall_64+0x33/0x40 [ 914.846486] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 914.847179] RIP: 0033:0x7f8817f78b19 [ 914.847709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.850028] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 914.850238] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.852301] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 914.853319] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 914.854292] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.855309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.856352] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 914.881942] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 914.886413] FAULT_INJECTION: forcing a failure. [ 914.886413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.889372] CPU: 0 PID: 7259 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 914.890845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.892625] Call Trace: [ 914.893233] dump_stack+0x107/0x167 [ 914.894029] should_fail.cold+0x5/0xa [ 914.894863] _copy_from_user+0x2e/0x1b0 [ 914.895724] __copy_msghdr_from_user+0x91/0x4b0 [ 914.896728] ? __ia32_sys_shutdown+0x80/0x80 [ 914.897689] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.898823] ? __lock_acquire+0x1657/0x5b00 [ 914.899780] ? __lock_acquire+0xbb1/0x5b00 [ 914.900707] sendmsg_copy_msghdr+0xa1/0x160 [ 914.901641] ? do_recvmmsg+0x6d0/0x6d0 [ 914.902484] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.903618] ? lock_downgrade+0x6d0/0x6d0 [ 914.904521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.905690] ___sys_sendmsg+0xc6/0x170 [ 914.906533] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.907583] ? __fget_files+0x26d/0x480 [ 914.908475] ? lock_downgrade+0x6d0/0x6d0 [ 914.909386] ? find_held_lock+0x2c/0x110 [ 914.910272] ? __fget_files+0x296/0x480 [ 914.911142] ? __fget_light+0xea/0x290 [ 914.912023] __sys_sendmsg+0xe5/0x1b0 [ 914.912848] ? __sys_sendmsg_sock+0xb0/0xb0 [ 914.913833] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.914844] ? fput_many+0x2f/0x1a0 [ 914.915626] ? ksys_write+0x1a9/0x260 [ 914.916458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.917599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.918717] ? trace_hardirqs_on+0x5b/0x180 [ 914.919653] do_syscall_64+0x33/0x40 [ 914.920447] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 914.921556] RIP: 0033:0x7f3ef36acb19 [ 914.922360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.926332] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.927977] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 914.929518] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 914.931056] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.932606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.934162] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 914.943639] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:33:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 6) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 914.953666] FAULT_INJECTION: forcing a failure. [ 914.953666] name failslab, interval 1, probability 0, space 0, times 0 [ 914.954948] CPU: 1 PID: 7265 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 914.955683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.956570] Call Trace: [ 914.956865] dump_stack+0x107/0x167 [ 914.957259] should_fail.cold+0x5/0xa [ 914.957672] ? create_object.isra.0+0x3a/0xa20 [ 914.958153] should_failslab+0x5/0x20 [ 914.958575] kmem_cache_alloc+0x5b/0x360 [ 914.959013] create_object.isra.0+0x3a/0xa20 [ 914.959505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 914.960048] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 914.960595] ? netlink_sendmsg+0x98e/0xdf0 [ 914.961074] __alloc_skb+0xb1/0x620 [ 914.961469] netlink_sendmsg+0x98e/0xdf0 [ 914.961925] ? netlink_unicast+0x7f0/0x7f0 [ 914.962392] ? netlink_unicast+0x7f0/0x7f0 [ 914.962855] sock_sendmsg+0x154/0x190 [ 914.963278] ____sys_sendmsg+0x70d/0x870 [ 914.963721] ? kernel_sendmsg+0x50/0x50 [ 914.964160] ? do_recvmmsg+0x6d0/0x6d0 [ 914.964599] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.965212] ? lock_downgrade+0x6d0/0x6d0 [ 914.965670] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.966245] ___sys_sendmsg+0xf3/0x170 [ 914.966684] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.967182] ? lock_downgrade+0x6d0/0x6d0 [ 914.967653] ? find_held_lock+0x2c/0x110 [ 914.968119] ? __fget_files+0x296/0x480 [ 914.968572] ? __fget_light+0xea/0x290 [ 914.969027] __sys_sendmsg+0xe5/0x1b0 [ 914.969462] ? __sys_sendmsg_sock+0xb0/0xb0 [ 914.969948] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.970462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.971047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.971612] ? trace_hardirqs_on+0x5b/0x180 [ 914.972075] do_syscall_64+0x33/0x40 [ 914.972493] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 914.973060] RIP: 0033:0x7fbdc24f2b19 [ 914.973462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.975520] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.976376] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 914.977198] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 914.978005] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.978817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.979594] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 914.980467] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:33:35 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 914.994203] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 915.018852] FAULT_INJECTION: forcing a failure. [ 915.018852] name failslab, interval 1, probability 0, space 0, times 0 [ 915.020529] CPU: 1 PID: 7271 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 915.021296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 915.022210] Call Trace: [ 915.022515] dump_stack+0x107/0x167 [ 915.022920] should_fail.cold+0x5/0xa [ 915.023345] ? create_object.isra.0+0x3a/0xa20 [ 915.023844] should_failslab+0x5/0x20 [ 915.024269] kmem_cache_alloc+0x5b/0x360 [ 915.024720] ? irqentry_enter+0x26/0x60 [ 915.025159] create_object.isra.0+0x3a/0xa20 [ 915.025641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 915.026205] kmem_cache_alloc_node+0x169/0x370 [ 915.026711] __alloc_skb+0x6d/0x620 [ 915.027110] netlink_sendmsg+0x98e/0xdf0 [ 915.027555] ? netlink_unicast+0x7f0/0x7f0 [ 915.028042] ? netlink_unicast+0x7f0/0x7f0 [ 915.028500] sock_sendmsg+0x154/0x190 [ 915.028942] ____sys_sendmsg+0x70d/0x870 [ 915.029398] ? kernel_sendmsg+0x50/0x50 [ 915.029841] ? do_recvmmsg+0x6d0/0x6d0 [ 915.030160] 9pnet: Insufficient options for proto=fd [ 915.030278] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 915.030295] ? lock_downgrade+0x6d0/0x6d0 [ 915.032420] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 915.033018] ___sys_sendmsg+0xf3/0x170 [ 915.033452] ? sendmsg_copy_msghdr+0x160/0x160 [ 915.033954] ? lock_downgrade+0x6d0/0x6d0 [ 915.034413] ? find_held_lock+0x2c/0x110 [ 915.034852] ? __fget_files+0x296/0x480 [ 915.035294] ? __fget_light+0xea/0x290 [ 915.035715] __sys_sendmsg+0xe5/0x1b0 [ 915.036118] ? __sys_sendmsg_sock+0xb0/0xb0 [ 915.036581] ? rcu_read_lock_any_held+0x75/0xa0 [ 915.037092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 915.037660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 915.038204] ? trace_hardirqs_on+0x5b/0x180 [ 915.038682] do_syscall_64+0x33/0x40 [ 915.039081] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 915.039624] RIP: 0033:0x7ff678c61b19 [ 915.040043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 915.042034] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.042851] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 915.043614] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 915.044386] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 915.045146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.045917] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 18:33:35 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d61e4d2ded994a56ec565a0ba935fae21cc1427b10f6d9c19c332cda6c298c23d47b4de0e53457536eb22e70766c5bea870c626353aa855c8604367e2cf60ce29c7ecb22d221a2faf58d2cebbbc7626ebd6e5571ef5b99c9756e121a2551818", @ANYRESHEX=r3, @ANYBLOB=',\x00']) 18:33:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:33:35 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 915.069817] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 915.160312] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 915.162784] EXT4-fs (loop2): group descriptors corrupted! 18:33:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:33:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:46 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 2) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:33:46 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 5) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 7) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:33:46 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0x8, 0x5}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r4) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x3b, 0x8001}) close(r3) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="a087"]) pidfd_getfd(r3, r2, 0x0) 18:33:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 925.835545] FAULT_INJECTION: forcing a failure. [ 925.835545] name failslab, interval 1, probability 0, space 0, times 0 [ 925.837486] CPU: 1 PID: 7295 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 925.838448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.839636] Call Trace: [ 925.840016] dump_stack+0x107/0x167 [ 925.840533] should_fail.cold+0x5/0xa [ 925.841088] should_failslab+0x5/0x20 [ 925.841625] __kmalloc_node_track_caller+0x74/0x3f0 [ 925.842335] ? netlink_sendmsg+0x98e/0xdf0 [ 925.842954] __alloc_skb+0xb1/0x620 [ 925.843474] netlink_sendmsg+0x98e/0xdf0 [ 925.844058] ? netlink_unicast+0x7f0/0x7f0 [ 925.844665] ? netlink_unicast+0x7f0/0x7f0 [ 925.845272] sock_sendmsg+0x154/0x190 [ 925.845823] ____sys_sendmsg+0x70d/0x870 [ 925.846411] ? kernel_sendmsg+0x50/0x50 [ 925.846977] ? do_recvmmsg+0x6d0/0x6d0 [ 925.847538] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.848295] ? lock_downgrade+0x6d0/0x6d0 [ 925.848895] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.849666] ___sys_sendmsg+0xf3/0x170 [ 925.850226] ? sendmsg_copy_msghdr+0x160/0x160 [ 925.850882] ? lock_downgrade+0x6d0/0x6d0 [ 925.851482] ? find_held_lock+0x2c/0x110 [ 925.852075] ? __fget_files+0x296/0x480 [ 925.852652] ? __fget_light+0xea/0x290 [ 925.853256] __sys_sendmsg+0xe5/0x1b0 [ 925.853808] ? __sys_sendmsg_sock+0xb0/0xb0 [ 925.854226] __nla_validate_parse: 1 callbacks suppressed [ 925.854237] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 925.854421] ? rcu_read_lock_any_held+0x75/0xa0 [ 925.854449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 925.857951] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 925.858190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 925.858203] ? trace_hardirqs_on+0x5b/0x180 [ 925.858217] do_syscall_64+0x33/0x40 [ 925.858237] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 925.860157] EXT4-fs (loop2): group descriptors corrupted! [ 925.860857] RIP: 0033:0x7f8817f78b19 [ 925.860870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.860877] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.860891] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 925.860904] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 925.870022] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 925.871052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.872076] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 925.882256] FAULT_INJECTION: forcing a failure. [ 925.882256] name failslab, interval 1, probability 0, space 0, times 0 [ 925.884274] CPU: 1 PID: 7304 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 925.885261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.886430] Call Trace: [ 925.886811] dump_stack+0x107/0x167 [ 925.887329] should_fail.cold+0x5/0xa [ 925.887878] should_failslab+0x5/0x20 [ 925.888425] __kmalloc_node_track_caller+0x74/0x3f0 [ 925.889136] ? netlink_sendmsg+0x98e/0xdf0 [ 925.889741] __alloc_skb+0xb1/0x620 [ 925.890256] netlink_sendmsg+0x98e/0xdf0 [ 925.890832] ? netlink_unicast+0x7f0/0x7f0 [ 925.891449] ? netlink_unicast+0x7f0/0x7f0 [ 925.892055] sock_sendmsg+0x154/0x190 [ 925.892587] ____sys_sendmsg+0x70d/0x870 [ 925.893189] ? kernel_sendmsg+0x50/0x50 [ 925.893754] ? do_recvmmsg+0x6d0/0x6d0 [ 925.894316] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.895077] ? lock_downgrade+0x6d0/0x6d0 [ 925.895674] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.896427] ___sys_sendmsg+0xf3/0x170 [ 925.896982] ? sendmsg_copy_msghdr+0x160/0x160 [ 925.897656] ? lock_downgrade+0x6d0/0x6d0 [ 925.898247] ? find_held_lock+0x2c/0x110 [ 925.898836] ? __fget_files+0x296/0x480 [ 925.899417] ? __fget_light+0xea/0x290 [ 925.899982] __sys_sendmsg+0xe5/0x1b0 [ 925.900527] ? __sys_sendmsg_sock+0xb0/0xb0 [ 925.901161] ? rcu_read_lock_any_held+0x75/0xa0 [ 925.901837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 925.902592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 925.903335] ? trace_hardirqs_on+0x5b/0x180 [ 925.903956] do_syscall_64+0x33/0x40 [ 925.904490] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 925.905245] RIP: 0033:0x7ff678c61b19 [ 925.905776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.908421] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.909534] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 925.910553] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 925.911576] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 925.912604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.913655] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 925.915342] FAULT_INJECTION: forcing a failure. [ 925.915342] name failslab, interval 1, probability 0, space 0, times 0 [ 925.917074] CPU: 1 PID: 7298 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 925.918052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.919242] Call Trace: [ 925.919618] dump_stack+0x107/0x167 [ 925.920142] should_fail.cold+0x5/0xa [ 925.920689] ? __skb_ext_alloc+0x19/0x90 [ 925.921299] should_failslab+0x5/0x20 [ 925.921850] kmem_cache_alloc+0x5b/0x360 [ 925.922438] __skb_ext_alloc+0x19/0x90 [ 925.922997] skb_ext_add+0x508/0x670 [ 925.923535] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 925.924290] __alloc_skb+0x3c1/0x620 [ 925.924835] netlink_sendmsg+0x98e/0xdf0 [ 925.925461] ? netlink_unicast+0x7f0/0x7f0 [ 925.926088] ? netlink_unicast+0x7f0/0x7f0 [ 925.926692] sock_sendmsg+0x154/0x190 [ 925.927241] ____sys_sendmsg+0x70d/0x870 [ 925.927835] ? kernel_sendmsg+0x50/0x50 [ 925.928401] ? do_recvmmsg+0x6d0/0x6d0 [ 925.928958] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.929725] ? lock_downgrade+0x6d0/0x6d0 [ 925.930323] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.931073] ___sys_sendmsg+0xf3/0x170 [ 925.931627] ? sendmsg_copy_msghdr+0x160/0x160 [ 925.932289] ? lock_downgrade+0x6d0/0x6d0 [ 925.932890] ? find_held_lock+0x2c/0x110 [ 925.933493] ? __fget_files+0x296/0x480 [ 925.934071] ? __fget_light+0xea/0x290 [ 925.934640] __sys_sendmsg+0xe5/0x1b0 [ 925.935185] ? __sys_sendmsg_sock+0xb0/0xb0 [ 925.935808] ? rcu_read_lock_any_held+0x75/0xa0 [ 925.936485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 925.937261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 925.938002] ? trace_hardirqs_on+0x5b/0x180 [ 925.938626] do_syscall_64+0x33/0x40 [ 925.939165] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 925.939898] RIP: 0033:0x7fbdc24f2b19 [ 925.940429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 925.943086] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.944177] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 925.945220] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 925.946261] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 925.947288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.948315] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 925.949431] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:33:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:33:46 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 925.965541] FAULT_INJECTION: forcing a failure. [ 925.965541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.968213] CPU: 0 PID: 7293 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 925.969638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 925.971332] Call Trace: [ 925.971887] dump_stack+0x107/0x167 [ 925.972639] should_fail.cold+0x5/0xa [ 925.973439] _copy_from_user+0x2e/0x1b0 [ 925.974274] iovec_from_user+0x141/0x400 [ 925.975134] __import_iovec+0x67/0x590 [ 925.975940] ? __ia32_sys_shutdown+0x80/0x80 [ 925.976852] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.977957] import_iovec+0x83/0xb0 [ 925.978717] sendmsg_copy_msghdr+0x131/0x160 [ 925.979651] ? do_recvmmsg+0x6d0/0x6d0 [ 925.980463] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.981570] ? lock_downgrade+0x6d0/0x6d0 [ 925.982433] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 925.983522] ___sys_sendmsg+0xc6/0x170 [ 925.984342] ? sendmsg_copy_msghdr+0x160/0x160 [ 925.985296] ? __fget_files+0x26d/0x480 [ 925.986119] ? lock_downgrade+0x6d0/0x6d0 [ 925.986982] ? find_held_lock+0x2c/0x110 [ 925.987834] ? __fget_files+0x296/0x480 [ 925.988667] ? __fget_light+0xea/0x290 [ 925.989487] __sys_sendmsg+0xe5/0x1b0 [ 925.990267] ? __sys_sendmsg_sock+0xb0/0xb0 [ 925.991153] ? rcu_read_lock_any_held+0x75/0xa0 [ 925.992112] ? fput_many+0x2f/0x1a0 [ 925.992860] ? ksys_write+0x1a9/0x260 [ 925.993670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 925.994748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 925.995805] ? trace_hardirqs_on+0x5b/0x180 [ 925.996693] do_syscall_64+0x33/0x40 [ 925.997465] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 925.998516] RIP: 0033:0x7f3ef36acb19 [ 925.999284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 926.002061] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 926.003053] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.003074] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 926.003089] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 926.008756] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 926.010234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.011695] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 926.015830] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 926.042119] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 926.043529] EXT4-fs (loop2): group descriptors corrupted! 18:33:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 8) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 926.091058] FAULT_INJECTION: forcing a failure. [ 926.091058] name failslab, interval 1, probability 0, space 0, times 0 [ 926.092653] CPU: 1 PID: 7318 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 926.093597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 926.094739] Call Trace: [ 926.095114] dump_stack+0x107/0x167 [ 926.095626] should_fail.cold+0x5/0xa [ 926.096164] ? create_object.isra.0+0x3a/0xa20 [ 926.096792] should_failslab+0x5/0x20 [ 926.097329] kmem_cache_alloc+0x5b/0x360 [ 926.097896] create_object.isra.0+0x3a/0xa20 [ 926.098493] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 926.099192] kmem_cache_alloc+0x159/0x360 [ 926.099763] __skb_ext_alloc+0x19/0x90 [ 926.100290] skb_ext_add+0x508/0x670 [ 926.100788] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 926.101552] __alloc_skb+0x3c1/0x620 [ 926.102083] netlink_sendmsg+0x98e/0xdf0 [ 926.102657] ? netlink_unicast+0x7f0/0x7f0 [ 926.103263] ? netlink_unicast+0x7f0/0x7f0 [ 926.103858] sock_sendmsg+0x154/0x190 [ 926.104401] ____sys_sendmsg+0x70d/0x870 [ 926.104985] ? kernel_sendmsg+0x50/0x50 [ 926.105553] ? do_recvmmsg+0x6d0/0x6d0 [ 926.106113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 926.106857] ? lock_downgrade+0x6d0/0x6d0 [ 926.107451] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 926.108198] ___sys_sendmsg+0xf3/0x170 [ 926.108751] ? sendmsg_copy_msghdr+0x160/0x160 [ 926.109424] ? lock_downgrade+0x6d0/0x6d0 [ 926.110035] ? find_held_lock+0x2c/0x110 [ 926.110626] ? __fget_files+0x296/0x480 [ 926.111207] ? __fget_light+0xea/0x290 [ 926.111766] __sys_sendmsg+0xe5/0x1b0 [ 926.112308] ? __sys_sendmsg_sock+0xb0/0xb0 [ 926.112927] ? rcu_read_lock_any_held+0x75/0xa0 [ 926.113621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 926.114368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 926.115103] ? trace_hardirqs_on+0x5b/0x180 [ 926.115718] do_syscall_64+0x33/0x40 [ 926.116246] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 926.116971] RIP: 0033:0x7fbdc24f2b19 [ 926.117508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 926.120147] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.121257] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 926.122273] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 926.123302] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 926.124333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.125362] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 926.126462] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 938.304423] FAULT_INJECTION: forcing a failure. [ 938.304423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.305801] CPU: 1 PID: 7326 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 938.306538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.307435] Call Trace: [ 938.307737] dump_stack+0x107/0x167 [ 938.308143] should_fail.cold+0x5/0xa [ 938.308569] _copy_from_iter_full+0x1ff/0x940 [ 938.309068] ? __check_object_size+0x319/0x440 [ 938.309591] netlink_sendmsg+0x86f/0xdf0 [ 938.310036] ? netlink_unicast+0x7f0/0x7f0 [ 938.310497] ? netlink_unicast+0x7f0/0x7f0 [ 938.310965] sock_sendmsg+0x154/0x190 [ 938.311366] ____sys_sendmsg+0x70d/0x870 [ 938.311802] ? kernel_sendmsg+0x50/0x50 [ 938.312221] ? do_recvmmsg+0x6d0/0x6d0 [ 938.312650] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.313213] ? lock_downgrade+0x6d0/0x6d0 [ 938.313659] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.314209] ___sys_sendmsg+0xf3/0x170 [ 938.314615] ? sendmsg_copy_msghdr+0x160/0x160 [ 938.315106] ? lock_downgrade+0x6d0/0x6d0 [ 938.315544] ? find_held_lock+0x2c/0x110 [ 938.315973] ? __fget_files+0x296/0x480 [ 938.316405] ? __fget_light+0xea/0x290 [ 938.316832] __sys_sendmsg+0xe5/0x1b0 [ 938.317238] ? __sys_sendmsg_sock+0xb0/0xb0 [ 938.317698] ? rcu_read_lock_any_held+0x75/0xa0 [ 938.318203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.318762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.319315] ? trace_hardirqs_on+0x5b/0x180 [ 938.319776] do_syscall_64+0x33/0x40 [ 938.320172] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 938.320729] RIP: 0033:0x7fbdc24f2b19 [ 938.321127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.323121] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.323935] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 938.324714] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 938.325488] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.326269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.327046] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 938.342550] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 938.348305] FAULT_INJECTION: forcing a failure. [ 938.348305] name failslab, interval 1, probability 0, space 0, times 0 [ 938.349927] CPU: 1 PID: 7340 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 938.350674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.351582] Call Trace: [ 938.351876] dump_stack+0x107/0x167 [ 938.352271] should_fail.cold+0x5/0xa [ 938.352677] ? create_object.isra.0+0x3a/0xa20 [ 938.353176] should_failslab+0x5/0x20 [ 938.353589] kmem_cache_alloc+0x5b/0x360 [ 938.354035] create_object.isra.0+0x3a/0xa20 [ 938.354507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 938.354539] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.355061] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 938.355071] ? netlink_sendmsg+0x98e/0xdf0 [ 938.355085] __alloc_skb+0xb1/0x620 [ 938.355097] netlink_sendmsg+0x98e/0xdf0 [ 938.355111] ? netlink_unicast+0x7f0/0x7f0 [ 938.355127] ? netlink_unicast+0x7f0/0x7f0 [ 938.355146] sock_sendmsg+0x154/0x190 [ 938.360080] ____sys_sendmsg+0x70d/0x870 [ 938.360514] ? kernel_sendmsg+0x50/0x50 [ 938.360950] ? do_recvmmsg+0x6d0/0x6d0 [ 938.361377] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.361943] ? lock_downgrade+0x6d0/0x6d0 [ 938.362396] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.362967] ___sys_sendmsg+0xf3/0x170 [ 938.363387] ? sendmsg_copy_msghdr+0x160/0x160 [ 938.363880] ? lock_downgrade+0x6d0/0x6d0 [ 938.364334] ? find_held_lock+0x2c/0x110 [ 938.364772] ? __fget_files+0x296/0x480 [ 938.365213] ? __fget_light+0xea/0x290 [ 938.365634] __sys_sendmsg+0xe5/0x1b0 [ 938.366042] ? __sys_sendmsg_sock+0xb0/0xb0 [ 938.366519] ? rcu_read_lock_any_held+0x75/0xa0 [ 938.367032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.367549] FAULT_INJECTION: forcing a failure. [ 938.367549] name failslab, interval 1, probability 0, space 0, times 0 [ 938.367596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.367607] ? trace_hardirqs_on+0x5b/0x180 [ 938.367618] do_syscall_64+0x33/0x40 [ 938.367630] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 938.367638] RIP: 0033:0x7ff678c61b19 [ 938.367649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.367664] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.375181] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 938.375951] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 938.376717] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.377505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.378265] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 938.379049] CPU: 0 PID: 7334 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 938.379253] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 938.380550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.380556] Call Trace: [ 938.380578] dump_stack+0x107/0x167 [ 938.380600] should_fail.cold+0x5/0xa [ 938.382566] FAULT_INJECTION: forcing a failure. [ 938.382566] name failslab, interval 1, probability 0, space 0, times 0 [ 938.383327] ? create_object.isra.0+0x3a/0xa20 [ 938.383348] should_failslab+0x5/0x20 [ 938.383365] kmem_cache_alloc+0x5b/0x360 [ 938.383389] create_object.isra.0+0x3a/0xa20 [ 938.391265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 938.392389] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 938.393526] ? netlink_sendmsg+0x98e/0xdf0 [ 938.394449] __alloc_skb+0xb1/0x620 [ 938.395246] netlink_sendmsg+0x98e/0xdf0 [ 938.396136] ? netlink_unicast+0x7f0/0x7f0 [ 938.397071] ? netlink_unicast+0x7f0/0x7f0 [ 938.397994] sock_sendmsg+0x154/0x190 [ 938.398824] ____sys_sendmsg+0x70d/0x870 [ 938.399702] ? kernel_sendmsg+0x50/0x50 [ 938.400558] ? do_recvmmsg+0x6d0/0x6d0 [ 938.401415] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.402552] ? lock_downgrade+0x6d0/0x6d0 [ 938.403454] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.404597] ___sys_sendmsg+0xf3/0x170 [ 938.405449] ? sendmsg_copy_msghdr+0x160/0x160 [ 938.406461] ? lock_downgrade+0x6d0/0x6d0 [ 938.407359] ? find_held_lock+0x2c/0x110 [ 938.408262] ? __fget_files+0x296/0x480 [ 938.409133] ? __fget_light+0xea/0x290 [ 938.410002] __sys_sendmsg+0xe5/0x1b0 [ 938.410825] ? __sys_sendmsg_sock+0xb0/0xb0 [ 938.411769] ? rcu_read_lock_any_held+0x75/0xa0 [ 938.412797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.413946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.415064] ? trace_hardirqs_on+0x5b/0x180 [ 938.416009] do_syscall_64+0x33/0x40 [ 938.416826] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 938.417970] RIP: 0033:0x7f8817f78b19 [ 938.418780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.422767] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.424409] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 938.425967] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 938.427508] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.429048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.430598] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 938.432160] CPU: 1 PID: 7330 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 938.432903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.433444] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 938.433831] Call Trace: [ 938.433842] dump_stack+0x107/0x167 [ 938.433854] should_fail.cold+0x5/0xa [ 938.433863] ? __alloc_skb+0x6d/0x620 [ 938.433874] should_failslab+0x5/0x20 [ 938.433883] kmem_cache_alloc_node+0x55/0x370 [ 938.433897] __alloc_skb+0x6d/0x620 [ 938.438654] netlink_sendmsg+0x98e/0xdf0 [ 938.439179] ? netlink_unicast+0x7f0/0x7f0 18:33:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 9) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:33:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 3) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:33:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:33:58 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="00001d5d20ffc7be5a8a47800e2d6fc7d90139ea5d79077c33feba2df4072093e8f36b1720175cbe9e613a85e71fd1ab5d24fd9e8836a6c501902de4c4df06e67c0110e4b5d8bed03fe3b6dd541662875d2715273866d385cc1ae4c66a19d0ed54ecccf6cd08526af5f6cc3e36cc7ac6e89bf6375660d301de9da37254d32916e41ee8be20d38cc369ed9c0e036d0e88c496f5775cd258a0f6c26be7e2bd0e7a8f83338775de61988a329feca22dc15853a8a9c63fa9944cc478559221b1af55b0c4ce84b7246e339ebbe0ef8d5e8bb1e2583a20c3be71060efc83adaa967af29bee449b0a9c8810a50b7890830c2ef4c5"]) 18:33:58 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 6) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:58 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:58 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 938.439648] ? netlink_unicast+0x7f0/0x7f0 [ 938.440222] sock_sendmsg+0x154/0x190 [ 938.440626] ____sys_sendmsg+0x70d/0x870 [ 938.441061] ? kernel_sendmsg+0x50/0x50 [ 938.441491] ? do_recvmmsg+0x6d0/0x6d0 [ 938.441904] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.442459] ? lock_downgrade+0x6d0/0x6d0 [ 938.442903] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.443465] ___sys_sendmsg+0xf3/0x170 [ 938.443881] ? sendmsg_copy_msghdr+0x160/0x160 [ 938.444378] ? lock_downgrade+0x6d0/0x6d0 [ 938.444824] ? find_held_lock+0x2c/0x110 [ 938.445269] ? __fget_files+0x296/0x480 [ 938.445704] ? __fget_light+0xea/0x290 [ 938.446125] __sys_sendmsg+0xe5/0x1b0 [ 938.446529] ? __sys_sendmsg_sock+0xb0/0xb0 [ 938.446984] ? rcu_read_lock_any_held+0x75/0xa0 [ 938.447493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.448048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.448599] ? trace_hardirqs_on+0x5b/0x180 [ 938.449053] do_syscall_64+0x33/0x40 [ 938.449474] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 938.450021] RIP: 0033:0x7f3ef36acb19 [ 938.450413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.452348] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.453148] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 938.453909] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 938.454661] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.455413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.456165] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 938.462324] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 938.463372] EXT4-fs (loop2): group descriptors corrupted! 18:33:59 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 7) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:33:59 executing program 4: r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) ioprio_set$pid(0x1, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) waitid(0x2, r1, 0x0, 0x4, &(0x7f00000000c0)) r4 = getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) get_robust_list(r4, &(0x7f0000000840)=&(0x7f0000000800)={&(0x7f0000000740)={&(0x7f00000002c0)}, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)}}, &(0x7f0000000880)=0x18) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="01000000008000", @ANYRESHEX=r6, @ANYBLOB="8000"]) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xe0400, 0x0) recvmsg$unix(r7, &(0x7f0000000700)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)=""/220, 0xdc}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000600)=""/126, 0x7e}], 0x7, &(0x7f00000002c0)}, 0x40000001) [ 938.547547] 9pnet: Insufficient options for proto=fd 18:33:59 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:59 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 938.570171] FAULT_INJECTION: forcing a failure. [ 938.570171] name failslab, interval 1, probability 0, space 0, times 0 [ 938.573062] CPU: 0 PID: 7350 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 938.574727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.576730] Call Trace: [ 938.577417] dump_stack+0x107/0x167 [ 938.578273] should_fail.cold+0x5/0xa [ 938.579104] ? __skb_ext_alloc+0x19/0x90 [ 938.579989] should_failslab+0x5/0x20 [ 938.580820] kmem_cache_alloc+0x5b/0x360 [ 938.581741] __skb_ext_alloc+0x19/0x90 [ 938.582585] skb_ext_add+0x508/0x670 [ 938.583413] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 938.584551] __alloc_skb+0x3c1/0x620 [ 938.585395] netlink_sendmsg+0x98e/0xdf0 [ 938.585766] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.586288] ? netlink_unicast+0x7f0/0x7f0 [ 938.586321] ? netlink_unicast+0x7f0/0x7f0 [ 938.589012] sock_sendmsg+0x154/0x190 [ 938.589872] ____sys_sendmsg+0x70d/0x870 [ 938.590759] ? kernel_sendmsg+0x50/0x50 [ 938.591616] ? do_recvmmsg+0x6d0/0x6d0 [ 938.592475] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.593625] ? lock_downgrade+0x6d0/0x6d0 [ 938.594539] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.595680] ___sys_sendmsg+0xf3/0x170 [ 938.596525] ? sendmsg_copy_msghdr+0x160/0x160 [ 938.597562] ? lock_downgrade+0x6d0/0x6d0 [ 938.598476] ? find_held_lock+0x2c/0x110 [ 938.599378] ? __fget_files+0x296/0x480 [ 938.600261] ? __fget_light+0xea/0x290 [ 938.601128] __sys_sendmsg+0xe5/0x1b0 [ 938.601985] ? __sys_sendmsg_sock+0xb0/0xb0 [ 938.602935] ? rcu_read_lock_any_held+0x75/0xa0 [ 938.603963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.605112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.606256] ? trace_hardirqs_on+0x5b/0x180 [ 938.607208] do_syscall_64+0x33/0x40 [ 938.608025] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 938.609149] RIP: 0033:0x7f8817f78b19 [ 938.609999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.614038] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.615718] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 938.617312] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 938.618885] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.620455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.622048] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 938.624144] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:33:59 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:33:59 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:33:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 938.646363] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 938.652916] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 938.655059] EXT4-fs (loop2): group descriptors corrupted! [ 938.704041] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.707379] FAULT_INJECTION: forcing a failure. [ 938.707379] name failslab, interval 1, probability 0, space 0, times 0 [ 938.709987] CPU: 0 PID: 7374 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 938.711462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.713294] Call Trace: [ 938.713880] dump_stack+0x107/0x167 [ 938.714682] should_fail.cold+0x5/0xa [ 938.715517] ? __skb_ext_alloc+0x19/0x90 [ 938.716405] should_failslab+0x5/0x20 [ 938.717258] kmem_cache_alloc+0x5b/0x360 [ 938.718153] __skb_ext_alloc+0x19/0x90 [ 938.719001] skb_ext_add+0x508/0x670 [ 938.719817] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 938.720964] __alloc_skb+0x3c1/0x620 [ 938.721811] netlink_sendmsg+0x98e/0xdf0 [ 938.722709] ? netlink_unicast+0x7f0/0x7f0 [ 938.723644] ? netlink_unicast+0x7f0/0x7f0 [ 938.724564] sock_sendmsg+0x154/0x190 [ 938.725424] ____sys_sendmsg+0x70d/0x870 [ 938.726314] ? kernel_sendmsg+0x50/0x50 [ 938.727176] ? do_recvmmsg+0x6d0/0x6d0 [ 938.728029] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.729185] ? lock_downgrade+0x6d0/0x6d0 [ 938.730107] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 938.731257] ___sys_sendmsg+0xf3/0x170 [ 938.732107] ? sendmsg_copy_msghdr+0x160/0x160 [ 938.733109] ? lock_downgrade+0x6d0/0x6d0 [ 938.734036] ? find_held_lock+0x2c/0x110 [ 938.734932] ? __fget_files+0x296/0x480 [ 938.735811] ? __fget_light+0xea/0x290 [ 938.736667] __sys_sendmsg+0xe5/0x1b0 [ 938.737525] ? __sys_sendmsg_sock+0xb0/0xb0 [ 938.738467] ? rcu_read_lock_any_held+0x75/0xa0 [ 938.739497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.740646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.741792] ? trace_hardirqs_on+0x5b/0x180 [ 938.742738] do_syscall_64+0x33/0x40 [ 938.743554] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 938.744669] RIP: 0033:0x7ff678c61b19 [ 938.745505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.749533] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.751189] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 938.752737] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 938.754313] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.755858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.757419] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 938.759463] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:34:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:34:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:34:10 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:10 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f00000002c0)=""/60, 0x3c}], 0x6, &(0x7f00000004c0)}}], 0x1, 0x1, &(0x7f0000000540)) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:34:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 4) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:34:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 10) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:34:10 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:10 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 8) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 949.653213] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 949.667501] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 949.686057] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 949.687360] FAULT_INJECTION: forcing a failure. [ 949.687360] name failslab, interval 1, probability 0, space 0, times 0 [ 949.690639] CPU: 0 PID: 7389 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 949.692054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 949.693741] Call Trace: [ 949.694284] dump_stack+0x107/0x167 [ 949.695030] should_fail.cold+0x5/0xa [ 949.695806] ? __alloc_skb+0x6d/0x620 [ 949.696587] should_failslab+0x5/0x20 [ 949.697421] kmem_cache_alloc_node+0x55/0x370 [ 949.698095] FAULT_INJECTION: forcing a failure. [ 949.698095] name failslab, interval 1, probability 0, space 0, times 0 [ 949.698335] __alloc_skb+0x6d/0x620 [ 949.701331] netlink_dump+0x735/0x1050 [ 949.702124] ? netlink_insert+0x1640/0x1640 [ 949.702990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 949.703975] ? trace_hardirqs_on+0x5b/0x180 [ 949.704855] __netlink_dump_start+0x649/0x900 [ 949.705780] ctnetlink_get_expect+0x662/0x740 [ 949.706686] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 949.707838] ? mutex_lock_io_nested+0x1110/0x1110 [ 949.708812] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 949.710038] ? ctnetlink_get_ct_dying+0x160/0x160 [ 949.711010] ? nfnetlink_rcv_msg+0x875/0xf40 [ 949.711897] ? lock_downgrade+0x6d0/0x6d0 [ 949.712739] ? __nla_parse+0x3e/0x50 [ 949.713499] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 949.714655] nfnetlink_rcv_msg+0xc40/0xf40 [ 949.715530] ? nfnetlink_bind+0x2d0/0x2d0 [ 949.716375] ? avc_has_extended_perms+0xec0/0xec0 [ 949.717358] ? __lock_acquire+0xbb1/0x5b00 [ 949.718225] ? cred_has_capability.isra.0+0x143/0x2b0 [ 949.719263] ? cred_has_capability.isra.0+0x152/0x2b0 [ 949.720299] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 949.721287] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 949.722307] netlink_rcv_skb+0x14b/0x430 [ 949.723131] ? nfnetlink_bind+0x2d0/0x2d0 [ 949.723974] ? netlink_ack+0xab0/0xab0 [ 949.724777] ? ns_capable+0xdd/0x100 [ 949.725586] nfnetlink_rcv+0x1ac/0x420 [ 949.726389] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 949.727342] ? netlink_deliver_tap+0x1c4/0xc40 [ 949.728260] ? is_vmalloc_addr+0x7b/0xb0 [ 949.729083] netlink_unicast+0x549/0x7f0 [ 949.729914] ? netlink_attachskb+0x810/0x810 [ 949.730824] netlink_sendmsg+0x905/0xdf0 [ 949.731655] ? netlink_unicast+0x7f0/0x7f0 [ 949.732524] ? netlink_unicast+0x7f0/0x7f0 [ 949.733391] sock_sendmsg+0x154/0x190 [ 949.734161] ____sys_sendmsg+0x70d/0x870 [ 949.734986] ? kernel_sendmsg+0x50/0x50 [ 949.735783] ? do_recvmmsg+0x6d0/0x6d0 [ 949.736569] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.737632] ? lock_downgrade+0x6d0/0x6d0 [ 949.738471] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.739530] ___sys_sendmsg+0xf3/0x170 [ 949.740315] ? sendmsg_copy_msghdr+0x160/0x160 [ 949.741245] ? lock_downgrade+0x6d0/0x6d0 [ 949.742087] ? find_held_lock+0x2c/0x110 [ 949.742925] ? __fget_files+0x296/0x480 [ 949.743734] ? __fget_light+0xea/0x290 [ 949.744525] __sys_sendmsg+0xe5/0x1b0 [ 949.745321] ? __sys_sendmsg_sock+0xb0/0xb0 [ 949.746199] ? rcu_read_lock_any_held+0x75/0xa0 [ 949.747176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 949.748229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 949.749276] ? trace_hardirqs_on+0x5b/0x180 [ 949.750156] do_syscall_64+0x33/0x40 [ 949.750913] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 949.751937] RIP: 0033:0x7fbdc24f2b19 [ 949.752693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 949.756413] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.757964] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 949.759404] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 949.760834] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 949.762276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.763723] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 949.765198] CPU: 1 PID: 7397 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 949.766597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 949.768275] Call Trace: [ 949.768809] dump_stack+0x107/0x167 [ 949.769569] should_fail.cold+0x5/0xa [ 949.770002] FAULT_INJECTION: forcing a failure. [ 949.770002] name failslab, interval 1, probability 0, space 0, times 0 [ 949.770341] ? create_object.isra.0+0x3a/0xa20 [ 949.773446] should_failslab+0x5/0x20 [ 949.774208] kmem_cache_alloc+0x5b/0x360 [ 949.775036] create_object.isra.0+0x3a/0xa20 [ 949.775931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 949.776969] kmem_cache_alloc+0x159/0x360 [ 949.777827] __skb_ext_alloc+0x19/0x90 [ 949.778614] skb_ext_add+0x508/0x670 [ 949.779366] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 949.780437] __alloc_skb+0x3c1/0x620 [ 949.781209] netlink_sendmsg+0x98e/0xdf0 [ 949.782055] ? netlink_unicast+0x7f0/0x7f0 [ 949.782930] ? netlink_unicast+0x7f0/0x7f0 [ 949.783789] sock_sendmsg+0x154/0x190 [ 949.784568] ____sys_sendmsg+0x70d/0x870 [ 949.785408] ? kernel_sendmsg+0x50/0x50 [ 949.786209] ? do_recvmmsg+0x6d0/0x6d0 [ 949.787010] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.788093] ? lock_downgrade+0x6d0/0x6d0 [ 949.788948] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.790019] ___sys_sendmsg+0xf3/0x170 [ 949.790823] ? sendmsg_copy_msghdr+0x160/0x160 [ 949.791757] ? lock_downgrade+0x6d0/0x6d0 [ 949.792607] ? find_held_lock+0x2c/0x110 [ 949.793447] ? __fget_files+0x296/0x480 [ 949.794278] ? __fget_light+0xea/0x290 [ 949.795079] __sys_sendmsg+0xe5/0x1b0 [ 949.795851] ? __sys_sendmsg_sock+0xb0/0xb0 [ 949.796728] ? rcu_read_lock_any_held+0x75/0xa0 [ 949.797704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 949.798775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 949.799826] ? trace_hardirqs_on+0x5b/0x180 [ 949.800718] do_syscall_64+0x33/0x40 [ 949.801485] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 949.802533] RIP: 0033:0x7ff678c61b19 [ 949.803287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 949.807053] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.808619] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 949.810089] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 949.811540] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 949.812997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.814458] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 949.815931] CPU: 0 PID: 7398 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 949.816311] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 949.817345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 949.817351] Call Trace: [ 949.817371] dump_stack+0x107/0x167 [ 949.817391] should_fail.cold+0x5/0xa [ 949.817408] ? create_object.isra.0+0x3a/0xa20 [ 949.817427] should_failslab+0x5/0x20 [ 949.817448] kmem_cache_alloc+0x5b/0x360 [ 949.825293] create_object.isra.0+0x3a/0xa20 [ 949.826186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 949.827230] kmem_cache_alloc+0x159/0x360 [ 949.828080] __skb_ext_alloc+0x19/0x90 [ 949.828882] skb_ext_add+0x508/0x670 [ 949.829655] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 949.830732] __alloc_skb+0x3c1/0x620 [ 949.831503] netlink_sendmsg+0x98e/0xdf0 [ 949.832346] ? netlink_unicast+0x7f0/0x7f0 [ 949.833188] FAULT_INJECTION: forcing a failure. [ 949.833188] name failslab, interval 1, probability 0, space 0, times 0 [ 949.835427] ? netlink_unicast+0x7f0/0x7f0 [ 949.836303] sock_sendmsg+0x154/0x190 [ 949.837085] ____sys_sendmsg+0x70d/0x870 [ 949.837930] ? kernel_sendmsg+0x50/0x50 [ 949.838730] ? do_recvmmsg+0x6d0/0x6d0 [ 949.839519] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.840578] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 949.841680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.842733] ___sys_sendmsg+0xf3/0x170 [ 949.843515] ? sendmsg_copy_msghdr+0x160/0x160 [ 949.844440] ? lock_downgrade+0x6d0/0x6d0 [ 949.845278] ? find_held_lock+0x2c/0x110 [ 949.846104] ? __fget_files+0x296/0x480 [ 949.846910] ? __fget_light+0xea/0x290 [ 949.847708] __sys_sendmsg+0xe5/0x1b0 [ 949.848481] ? __sys_sendmsg_sock+0xb0/0xb0 [ 949.849360] ? rcu_read_lock_any_held+0x75/0xa0 [ 949.850337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 949.851387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 949.852448] ? trace_hardirqs_on+0x5b/0x180 [ 949.853322] do_syscall_64+0x33/0x40 [ 949.854079] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 949.855146] RIP: 0033:0x7f8817f78b19 [ 949.855897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 949.859718] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.861245] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 949.862687] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 949.864122] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 949.865572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.867007] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 949.868472] CPU: 1 PID: 7400 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 949.869883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 949.870365] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 949.871562] Call Trace: [ 949.871584] dump_stack+0x107/0x167 [ 949.871605] should_fail.cold+0x5/0xa [ 949.871624] ? create_object.isra.0+0x3a/0xa20 [ 949.871643] should_failslab+0x5/0x20 [ 949.871660] kmem_cache_alloc+0x5b/0x360 [ 949.871683] create_object.isra.0+0x3a/0xa20 [ 949.878721] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 949.879748] kmem_cache_alloc_node+0x169/0x370 [ 949.880675] __alloc_skb+0x6d/0x620 [ 949.881429] netlink_sendmsg+0x98e/0xdf0 [ 949.882262] ? netlink_unicast+0x7f0/0x7f0 [ 949.883126] ? netlink_unicast+0x7f0/0x7f0 [ 949.883979] sock_sendmsg+0x154/0x190 [ 949.884752] ____sys_sendmsg+0x70d/0x870 [ 949.885594] ? kernel_sendmsg+0x50/0x50 [ 949.886395] ? do_recvmmsg+0x6d0/0x6d0 [ 949.887178] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.888230] ? lock_downgrade+0x6d0/0x6d0 [ 949.889089] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.890176] ___sys_sendmsg+0xf3/0x170 [ 949.890958] ? sendmsg_copy_msghdr+0x160/0x160 [ 949.891902] ? lock_downgrade+0x6d0/0x6d0 [ 949.892738] ? find_held_lock+0x2c/0x110 [ 949.893585] ? __fget_files+0x296/0x480 [ 949.894396] ? __fget_light+0xea/0x290 [ 949.895205] __sys_sendmsg+0xe5/0x1b0 [ 949.895969] ? __sys_sendmsg_sock+0xb0/0xb0 [ 949.896847] ? rcu_read_lock_any_held+0x75/0xa0 [ 949.897820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 949.898880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 949.899914] ? trace_hardirqs_on+0x5b/0x180 [ 949.900783] do_syscall_64+0x33/0x40 [ 949.901546] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 949.902577] RIP: 0033:0x7f3ef36acb19 [ 949.903323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 949.907022] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.908558] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 949.909998] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 949.911438] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 949.912881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.914321] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 18:34:10 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="7acb665e3af8a14dede83a36c1d9e367edcf0030a41cc407b331a6c74835e4afaf64fd78872c61073524f8af16f0c8f8a67c66962f9b60a3b97b98166e1ee66fa944c6e099c5"]) [ 949.957425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:34:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 11) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:34:10 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 9) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:34:10 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:10 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 950.041499] 9pnet: Insufficient options for proto=fd [ 950.055993] 9pnet: Insufficient options for proto=fd [ 950.074877] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:34:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 950.079148] FAULT_INJECTION: forcing a failure. [ 950.079148] name failslab, interval 1, probability 0, space 0, times 0 [ 950.081465] CPU: 1 PID: 7422 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 950.082842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 950.084513] Call Trace: [ 950.085060] dump_stack+0x107/0x167 [ 950.085805] should_fail.cold+0x5/0xa [ 950.086583] ? create_object.isra.0+0x3a/0xa20 [ 950.087520] should_failslab+0x5/0x20 [ 950.088300] kmem_cache_alloc+0x5b/0x360 [ 950.089147] create_object.isra.0+0x3a/0xa20 [ 950.090058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 950.091057] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 950.091110] kmem_cache_alloc_node+0x169/0x370 [ 950.093758] __alloc_skb+0x6d/0x620 [ 950.094509] netlink_dump+0x735/0x1050 [ 950.095316] ? netlink_insert+0x1640/0x1640 [ 950.096183] ? __mutex_unlock_slowpath+0xe1/0x600 [ 950.097179] ? trace_hardirqs_on+0x5b/0x180 [ 950.098080] __netlink_dump_start+0x649/0x900 [ 950.098166] FAULT_INJECTION: forcing a failure. [ 950.098166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.098999] ctnetlink_get_expect+0x662/0x740 [ 950.099023] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 950.099045] ? mutex_lock_io_nested+0x1110/0x1110 [ 950.104379] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 950.105616] ? ctnetlink_get_ct_dying+0x160/0x160 [ 950.106593] ? nfnetlink_rcv_msg+0x875/0xf40 [ 950.107500] ? lock_downgrade+0x6d0/0x6d0 [ 950.108347] ? __nla_parse+0x3e/0x50 [ 950.109100] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 950.110267] nfnetlink_rcv_msg+0xc40/0xf40 [ 950.111135] ? nfnetlink_bind+0x2d0/0x2d0 [ 950.111975] ? avc_has_extended_perms+0xec0/0xec0 [ 950.112964] ? __lock_acquire+0xbb1/0x5b00 [ 950.113847] ? cred_has_capability.isra.0+0x143/0x2b0 [ 950.114882] ? cred_has_capability.isra.0+0x152/0x2b0 [ 950.115930] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 950.116936] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 950.117938] netlink_rcv_skb+0x14b/0x430 [ 950.118760] ? nfnetlink_bind+0x2d0/0x2d0 [ 950.119599] ? netlink_ack+0xab0/0xab0 [ 950.120395] ? ns_capable+0xdd/0x100 [ 950.121151] nfnetlink_rcv+0x1ac/0x420 [ 950.121943] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 950.122897] ? netlink_deliver_tap+0x1c4/0xc40 [ 950.123825] ? is_vmalloc_addr+0x7b/0xb0 [ 950.124658] netlink_unicast+0x549/0x7f0 [ 950.125502] ? netlink_attachskb+0x810/0x810 [ 950.126401] netlink_sendmsg+0x905/0xdf0 [ 950.127232] ? netlink_unicast+0x7f0/0x7f0 [ 950.128099] ? netlink_unicast+0x7f0/0x7f0 [ 950.128954] sock_sendmsg+0x154/0x190 [ 950.129732] ____sys_sendmsg+0x70d/0x870 [ 950.130555] ? kernel_sendmsg+0x50/0x50 [ 950.131357] ? do_recvmmsg+0x6d0/0x6d0 [ 950.132146] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.133203] ? lock_downgrade+0x6d0/0x6d0 [ 950.134057] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.135116] ___sys_sendmsg+0xf3/0x170 [ 950.135901] ? sendmsg_copy_msghdr+0x160/0x160 [ 950.136827] ? lock_downgrade+0x6d0/0x6d0 [ 950.137673] ? find_held_lock+0x2c/0x110 [ 950.138507] ? __fget_files+0x296/0x480 [ 950.139332] ? __fget_light+0xea/0x290 [ 950.140135] __sys_sendmsg+0xe5/0x1b0 [ 950.140905] ? __sys_sendmsg_sock+0xb0/0xb0 [ 950.141791] ? rcu_read_lock_any_held+0x75/0xa0 [ 950.142753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 950.143830] ? syscall_enter_from_user_mode+0x1d/0x50 [ 950.144884] ? trace_hardirqs_on+0x5b/0x180 [ 950.145775] do_syscall_64+0x33/0x40 [ 950.146531] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 950.147570] RIP: 0033:0x7fbdc24f2b19 [ 950.148325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 950.152047] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.153598] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 950.155030] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 950.156462] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 950.157902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.159338] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 950.160929] CPU: 0 PID: 7419 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 950.162328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 950.164011] Call Trace: [ 950.164550] dump_stack+0x107/0x167 [ 950.165324] should_fail.cold+0x5/0xa [ 950.166109] _copy_from_iter_full+0x1ff/0x940 [ 950.167033] ? __check_object_size+0x319/0x440 [ 950.167974] netlink_sendmsg+0x86f/0xdf0 [ 950.168818] ? netlink_unicast+0x7f0/0x7f0 [ 950.169697] ? netlink_unicast+0x7f0/0x7f0 [ 950.170556] sock_sendmsg+0x154/0x190 [ 950.171341] ____sys_sendmsg+0x70d/0x870 [ 950.172197] ? kernel_sendmsg+0x50/0x50 [ 950.172995] ? do_recvmmsg+0x6d0/0x6d0 [ 950.173796] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.174848] ? lock_downgrade+0x6d0/0x6d0 [ 950.175686] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.176753] ___sys_sendmsg+0xf3/0x170 [ 950.177559] ? sendmsg_copy_msghdr+0x160/0x160 [ 950.178481] ? lock_downgrade+0x6d0/0x6d0 [ 950.179325] ? find_held_lock+0x2c/0x110 [ 950.180161] ? __fget_files+0x296/0x480 [ 950.180394] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 950.180973] ? __fget_light+0xea/0x290 [ 950.180997] __sys_sendmsg+0xe5/0x1b0 [ 950.181014] ? __sys_sendmsg_sock+0xb0/0xb0 [ 950.181031] ? rcu_read_lock_any_held+0x75/0xa0 [ 950.181066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 950.187113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 950.188169] ? trace_hardirqs_on+0x5b/0x180 [ 950.189039] do_syscall_64+0x33/0x40 [ 950.189792] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 950.190817] RIP: 0033:0x7f8817f78b19 [ 950.191566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 950.195268] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.196791] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 950.198246] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 950.199672] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 950.201097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.202536] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 18:34:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 12) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:34:10 executing program 4: r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="bffbf380d02e56560e398648d6", @ANYRESHEX=r0, @ANYRES64=r3, @ANYRES64=r0, @ANYRESDEC=r2]) 18:34:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 950.263963] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 950.282013] FAULT_INJECTION: forcing a failure. [ 950.282013] name failslab, interval 1, probability 0, space 0, times 0 [ 950.284406] CPU: 1 PID: 7431 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 950.285786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 950.287462] Call Trace: [ 950.288003] dump_stack+0x107/0x167 [ 950.288742] should_fail.cold+0x5/0xa [ 950.289538] should_failslab+0x5/0x20 [ 950.290309] __kmalloc_node_track_caller+0x74/0x3f0 [ 950.291315] ? netlink_dump+0x735/0x1050 [ 950.292142] __alloc_skb+0xb1/0x620 [ 950.292879] netlink_dump+0x735/0x1050 [ 950.293675] ? netlink_insert+0x1640/0x1640 [ 950.294543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 950.295525] ? trace_hardirqs_on+0x5b/0x180 [ 950.296412] __netlink_dump_start+0x649/0x900 [ 950.297351] ctnetlink_get_expect+0x662/0x740 [ 950.298261] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 950.299431] ? mutex_lock_io_nested+0x1110/0x1110 [ 950.300406] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 950.301633] ? ctnetlink_get_ct_dying+0x160/0x160 [ 950.302609] ? nfnetlink_rcv_msg+0x875/0xf40 [ 950.303506] ? lock_downgrade+0x6d0/0x6d0 [ 950.304351] ? __nla_parse+0x3e/0x50 [ 950.305104] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 950.306274] nfnetlink_rcv_msg+0xc40/0xf40 [ 950.307138] ? nfnetlink_bind+0x2d0/0x2d0 [ 950.307981] ? avc_has_extended_perms+0xec0/0xec0 [ 950.308962] ? __lock_acquire+0xbb1/0x5b00 [ 950.309854] ? cred_has_capability.isra.0+0x143/0x2b0 [ 950.310898] ? cred_has_capability.isra.0+0x152/0x2b0 [ 950.311943] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 950.312926] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 950.313929] netlink_rcv_skb+0x14b/0x430 [ 950.314752] ? nfnetlink_bind+0x2d0/0x2d0 [ 950.315595] ? netlink_ack+0xab0/0xab0 [ 950.316411] ? ns_capable+0xdd/0x100 [ 950.317175] nfnetlink_rcv+0x1ac/0x420 [ 950.317965] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 950.318927] ? netlink_deliver_tap+0x1c4/0xc40 [ 950.319856] ? is_vmalloc_addr+0x7b/0xb0 [ 950.320683] netlink_unicast+0x549/0x7f0 [ 950.321534] ? netlink_attachskb+0x810/0x810 [ 950.322433] netlink_sendmsg+0x905/0xdf0 [ 950.323267] ? netlink_unicast+0x7f0/0x7f0 [ 950.324133] ? netlink_unicast+0x7f0/0x7f0 [ 950.324987] sock_sendmsg+0x154/0x190 [ 950.325762] ____sys_sendmsg+0x70d/0x870 [ 950.326588] ? kernel_sendmsg+0x50/0x50 [ 950.327384] ? do_recvmmsg+0x6d0/0x6d0 [ 950.328175] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.329228] ? lock_downgrade+0x6d0/0x6d0 [ 950.330079] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.331134] ___sys_sendmsg+0xf3/0x170 [ 950.331915] ? sendmsg_copy_msghdr+0x160/0x160 [ 950.332836] ? lock_downgrade+0x6d0/0x6d0 [ 950.333682] ? find_held_lock+0x2c/0x110 [ 950.334508] ? __fget_files+0x296/0x480 [ 950.335326] ? __fget_light+0xea/0x290 [ 950.336116] __sys_sendmsg+0xe5/0x1b0 [ 950.336879] ? __sys_sendmsg_sock+0xb0/0xb0 [ 950.337765] ? rcu_read_lock_any_held+0x75/0xa0 [ 950.338728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 950.339788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 950.340825] ? trace_hardirqs_on+0x5b/0x180 [ 950.341704] do_syscall_64+0x33/0x40 [ 950.342454] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 950.343501] RIP: 0033:0x7fbdc24f2b19 [ 950.344258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 950.347984] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.349539] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 950.350970] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 950.352407] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 950.353866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.355293] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 950.401981] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 950.413492] FAULT_INJECTION: forcing a failure. [ 950.413492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.416310] CPU: 1 PID: 7440 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 950.417712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 950.419391] Call Trace: [ 950.419950] dump_stack+0x107/0x167 [ 950.420690] should_fail.cold+0x5/0xa [ 950.421476] _copy_from_iter_full+0x1ff/0x940 [ 950.422389] ? __check_object_size+0x319/0x440 [ 950.423315] netlink_sendmsg+0x86f/0xdf0 [ 950.424153] ? netlink_unicast+0x7f0/0x7f0 [ 950.425032] ? netlink_unicast+0x7f0/0x7f0 [ 950.425905] sock_sendmsg+0x154/0x190 [ 950.426692] ____sys_sendmsg+0x70d/0x870 [ 950.427531] ? kernel_sendmsg+0x50/0x50 [ 950.428342] ? do_recvmmsg+0x6d0/0x6d0 [ 950.429135] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.430218] ? lock_downgrade+0x6d0/0x6d0 [ 950.431058] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 950.432139] ___sys_sendmsg+0xf3/0x170 [ 950.432944] ? sendmsg_copy_msghdr+0x160/0x160 [ 950.434079] ? lock_downgrade+0x6d0/0x6d0 [ 950.435010] ? find_held_lock+0x2c/0x110 [ 950.435974] ? __fget_files+0x296/0x480 [ 950.436782] ? __fget_light+0xea/0x290 [ 950.437587] __sys_sendmsg+0xe5/0x1b0 [ 950.438353] ? __sys_sendmsg_sock+0xb0/0xb0 [ 950.439217] ? rcu_read_lock_any_held+0x75/0xa0 [ 950.440163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 950.441220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 950.442264] ? trace_hardirqs_on+0x5b/0x180 [ 950.443131] do_syscall_64+0x33/0x40 [ 950.443893] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 950.444924] RIP: 0033:0x7ff678c61b19 [ 950.445683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 950.449377] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.450905] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 950.452332] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 950.453771] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 950.455207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.456633] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 18:34:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 13) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:34:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 962.289257] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 962.318894] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 962.327181] FAULT_INJECTION: forcing a failure. [ 962.327181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.330130] CPU: 1 PID: 7454 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 962.331612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.331644] 9pnet: Insufficient options for proto=fd [ 962.333404] Call Trace: [ 962.333435] dump_stack+0x107/0x167 [ 962.333467] should_fail.cold+0x5/0xa [ 962.336203] _copy_from_iter_full+0x1ff/0x940 [ 962.337180] ? __check_object_size+0x319/0x440 [ 962.338195] netlink_sendmsg+0x86f/0xdf0 [ 962.339086] ? netlink_unicast+0x7f0/0x7f0 [ 962.340013] ? netlink_unicast+0x7f0/0x7f0 [ 962.340930] sock_sendmsg+0x154/0x190 [ 962.341765] ____sys_sendmsg+0x70d/0x870 [ 962.342646] ? kernel_sendmsg+0x50/0x50 [ 962.343503] ? do_recvmmsg+0x6d0/0x6d0 [ 962.344352] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.344873] FAULT_INJECTION: forcing a failure. [ 962.344873] name failslab, interval 1, probability 0, space 0, times 0 [ 962.345488] ? lock_downgrade+0x6d0/0x6d0 [ 962.345512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.345535] ___sys_sendmsg+0xf3/0x170 [ 962.349634] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.350628] ? lock_downgrade+0x6d0/0x6d0 [ 962.351530] ? find_held_lock+0x2c/0x110 [ 962.352419] ? __fget_files+0x296/0x480 [ 962.353288] ? __fget_light+0xea/0x290 [ 962.354144] __sys_sendmsg+0xe5/0x1b0 [ 962.354966] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.355897] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.356919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.358070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.359182] ? trace_hardirqs_on+0x5b/0x180 [ 962.360118] do_syscall_64+0x33/0x40 [ 962.360923] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.362035] RIP: 0033:0x7ff678c61b19 [ 962.362838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.366810] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.368455] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 962.370009] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.371550] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.373088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 962.374633] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 962.376193] CPU: 0 PID: 7455 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 962.376988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.377967] Call Trace: [ 962.378289] dump_stack+0x107/0x167 [ 962.378726] should_fail.cold+0x5/0xa [ 962.379177] ? create_object.isra.0+0x3a/0xa20 [ 962.379704] should_failslab+0x5/0x20 [ 962.380143] kmem_cache_alloc+0x5b/0x360 [ 962.380615] create_object.isra.0+0x3a/0xa20 [ 962.381124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 962.381730] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 962.382315] ? netlink_dump+0x735/0x1050 [ 962.382790] __alloc_skb+0xb1/0x620 [ 962.383213] netlink_dump+0x735/0x1050 [ 962.383662] ? netlink_insert+0x1640/0x1640 [ 962.384155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 962.384725] __netlink_dump_start+0x649/0x900 [ 962.385245] ctnetlink_get_expect+0x662/0x740 [ 962.385777] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.386441] ? mutex_lock_io_nested+0x1110/0x1110 [ 962.387006] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 962.387704] ? ctnetlink_get_ct_dying+0x160/0x160 [ 962.388275] ? nfnetlink_rcv_msg+0x875/0xf40 [ 962.388786] ? lock_downgrade+0x6d0/0x6d0 [ 962.389271] ? __nla_parse+0x3e/0x50 [ 962.389705] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.390371] nfnetlink_rcv_msg+0xc40/0xf40 [ 962.390868] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.391355] ? avc_has_extended_perms+0xec0/0xec0 [ 962.392114] ? __lock_acquire+0xbb1/0x5b00 [ 962.392614] ? cred_has_capability.isra.0+0x143/0x2b0 [ 962.393214] ? cred_has_capability.isra.0+0x152/0x2b0 [ 962.393816] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.394383] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.394954] netlink_rcv_skb+0x14b/0x430 [ 962.395429] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.395913] ? netlink_ack+0xab0/0xab0 [ 962.396376] ? ns_capable+0xdd/0x100 18:34:22 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:22 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 5) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:34:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:34:22 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:34:22 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x42, 0x140) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x20000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'rfdno'}}], [{@smackfsroot={'smackfsroot', 0x3d, 'k--%#+^^\\\\}:]:'}}, {@fowner_gt={'fowner>', 0xee01}}]}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x80}) [ 962.396804] nfnetlink_rcv+0x1ac/0x420 [ 962.397313] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 962.397865] ? netlink_deliver_tap+0x1c4/0xc40 [ 962.398393] ? is_vmalloc_addr+0x7b/0xb0 [ 962.398858] netlink_unicast+0x549/0x7f0 [ 962.399324] ? netlink_attachskb+0x810/0x810 [ 962.399838] netlink_sendmsg+0x905/0xdf0 [ 962.400308] ? netlink_unicast+0x7f0/0x7f0 [ 962.400807] ? netlink_unicast+0x7f0/0x7f0 [ 962.401295] sock_sendmsg+0x154/0x190 [ 962.401724] ____sys_sendmsg+0x70d/0x870 [ 962.402188] ? kernel_sendmsg+0x50/0x50 [ 962.402606] ? do_recvmmsg+0x6d0/0x6d0 [ 962.403034] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.403608] ? lock_downgrade+0x6d0/0x6d0 [ 962.404058] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.404632] ___sys_sendmsg+0xf3/0x170 [ 962.405063] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.405562] ? lock_downgrade+0x6d0/0x6d0 [ 962.406013] ? find_held_lock+0x2c/0x110 [ 962.406451] ? __fget_files+0x296/0x480 [ 962.406895] ? __fget_light+0xea/0x290 [ 962.407329] __sys_sendmsg+0xe5/0x1b0 [ 962.407732] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.408031] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 962.408196] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.408217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.411112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.411655] ? trace_hardirqs_on+0x5b/0x180 [ 962.412116] do_syscall_64+0x33/0x40 [ 962.412510] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.413056] RIP: 0033:0x7fbdc24f2b19 [ 962.413449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.415403] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.416209] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 962.416986] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.417743] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.418516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 962.419305] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 18:34:22 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 962.424738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 962.433991] FAULT_INJECTION: forcing a failure. [ 962.433991] name failslab, interval 1, probability 0, space 0, times 0 [ 962.436973] CPU: 1 PID: 7474 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 962.438464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.440270] Call Trace: [ 962.440846] dump_stack+0x107/0x167 [ 962.441647] should_fail.cold+0x5/0xa [ 962.442476] should_failslab+0x5/0x20 [ 962.443303] __kmalloc_node_track_caller+0x74/0x3f0 [ 962.444378] ? netlink_sendmsg+0x98e/0xdf0 [ 962.445297] __alloc_skb+0xb1/0x620 [ 962.446096] netlink_sendmsg+0x98e/0xdf0 [ 962.446982] ? netlink_unicast+0x7f0/0x7f0 [ 962.447907] ? netlink_unicast+0x7f0/0x7f0 [ 962.448850] sock_sendmsg+0x154/0x190 [ 962.449694] ____sys_sendmsg+0x70d/0x870 [ 962.450585] ? kernel_sendmsg+0x50/0x50 [ 962.451445] ? do_recvmmsg+0x6d0/0x6d0 [ 962.452300] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.453448] ? lock_downgrade+0x6d0/0x6d0 [ 962.454371] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.455513] ___sys_sendmsg+0xf3/0x170 [ 962.456366] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.457379] ? lock_downgrade+0x6d0/0x6d0 [ 962.458311] ? find_held_lock+0x2c/0x110 [ 962.459207] ? __fget_files+0x296/0x480 [ 962.460077] ? __fget_light+0xea/0x290 [ 962.460931] __sys_sendmsg+0xe5/0x1b0 [ 962.461773] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.462706] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.463730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.464872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.466003] ? trace_hardirqs_on+0x5b/0x180 [ 962.466948] do_syscall_64+0x33/0x40 [ 962.467759] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.468874] RIP: 0033:0x7f3ef36acb19 [ 962.469702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.473700] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.475379] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 962.476933] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.478487] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.480033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.481597] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 962.510527] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 962.512066] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:34:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:34:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 14) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 962.517770] FAULT_INJECTION: forcing a failure. [ 962.517770] name failslab, interval 1, probability 0, space 0, times 0 [ 962.519099] CPU: 0 PID: 7479 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 962.519830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.520705] Call Trace: [ 962.521000] dump_stack+0x107/0x167 [ 962.521394] should_fail.cold+0x5/0xa [ 962.521813] ? create_object.isra.0+0x3a/0xa20 [ 962.522302] should_failslab+0x5/0x20 [ 962.522720] kmem_cache_alloc+0x5b/0x360 [ 962.523160] create_object.isra.0+0x3a/0xa20 [ 962.523647] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 962.524190] kmem_cache_alloc_node+0x169/0x370 [ 962.524679] __alloc_skb+0x6d/0x620 [ 962.525070] netlink_dump+0x735/0x1050 [ 962.525500] ? netlink_insert+0x1640/0x1640 [ 962.525964] ? __mutex_unlock_slowpath+0xe1/0x600 [ 962.526485] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 962.527068] __netlink_dump_start+0x649/0x900 [ 962.527557] ctnetlink_get_expect+0x662/0x740 [ 962.528035] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.528672] ? mutex_lock_io_nested+0x1110/0x1110 [ 962.529186] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 962.529888] ? ctnetlink_get_ct_dying+0x160/0x160 [ 962.530428] ? nfnetlink_rcv_msg+0x875/0xf40 [ 962.530897] ? lock_downgrade+0x6d0/0x6d0 [ 962.531382] ? __nla_parse+0x3e/0x50 [ 962.531782] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.532430] nfnetlink_rcv_msg+0xc40/0xf40 [ 962.532894] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.533372] ? avc_has_extended_perms+0xec0/0xec0 18:34:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 962.533911] ? __lock_acquire+0xbb1/0x5b00 [ 962.534480] ? cred_has_capability.isra.0+0x143/0x2b0 [ 962.535050] ? cred_has_capability.isra.0+0x152/0x2b0 [ 962.535603] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.536155] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.536687] netlink_rcv_skb+0x14b/0x430 [ 962.537144] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.537607] ? netlink_ack+0xab0/0xab0 [ 962.538049] ? ns_capable+0xdd/0x100 [ 962.538458] nfnetlink_rcv+0x1ac/0x420 [ 962.538897] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 962.539403] ? netlink_deliver_tap+0x1c4/0xc40 [ 962.539919] ? is_vmalloc_addr+0x7b/0xb0 [ 962.540362] netlink_unicast+0x549/0x7f0 [ 962.540821] ? netlink_attachskb+0x810/0x810 [ 962.541314] netlink_sendmsg+0x905/0xdf0 [ 962.541784] ? netlink_unicast+0x7f0/0x7f0 [ 962.542267] ? netlink_unicast+0x7f0/0x7f0 [ 962.542731] sock_sendmsg+0x154/0x190 [ 962.543162] ____sys_sendmsg+0x70d/0x870 [ 962.543600] ? kernel_sendmsg+0x50/0x50 [ 962.544043] ? do_recvmmsg+0x6d0/0x6d0 [ 962.544462] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.545049] ? lock_downgrade+0x6d0/0x6d0 [ 962.545505] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.546097] ___sys_sendmsg+0xf3/0x170 [ 962.546519] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.547032] ? lock_downgrade+0x6d0/0x6d0 [ 962.547492] ? find_held_lock+0x2c/0x110 [ 962.547947] ? __fget_files+0x296/0x480 [ 962.548382] ? __fget_light+0xea/0x290 [ 962.548818] __sys_sendmsg+0xe5/0x1b0 [ 962.549232] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.549735] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.550269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.550833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.551415] ? trace_hardirqs_on+0x5b/0x180 [ 962.551885] do_syscall_64+0x33/0x40 [ 962.552301] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.552859] RIP: 0033:0x7ff678c61b19 [ 962.553270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.555247] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.556093] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 962.556882] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.557696] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.558477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 962.559264] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 962.572021] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:34:23 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x3ff, 0x8, &(0x7f0000001580)=[{&(0x7f00000001c0)="9b19286dc290bf2ced1fceadf357c4e076485fd32d8d30c7621ce2f694abfb5647d65db640c355e07e623b0ffa7569e02bb79199d51aa2fa5b004d777fa30e3419125eebdb63bc933735241822ebd8a20be59eb099bdee1d530adcdaa1884ce0703445380190b20f9999796a218bb5a6bacf03752237cd872fd9e1f1547f60ef69e57486104a572f1eae88319ea0c40e34bd4b24a9f4910987f43eade18549858ea31e9cf550dfcb973c94df0ec5d03af6d3710e4a3bb450", 0xb8, 0xd22f}, {&(0x7f0000000380)="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", 0x1000, 0x8}, {&(0x7f0000000280)="d5aaa73552e78f72f8c269951ac112082153b4e02c58", 0x16, 0x101}, {&(0x7f00000002c0)="49da99", 0x3, 0xffff}, {&(0x7f0000001380)="bccfb80bac2c1a9b4411270540c4f966e2d82b05ecb80a07a0a0b030e7fb761308151a439304bbc6b3a381d538812afa96deee66dda115e26967902f26a2b5ad718f594c7d3a0e01c95eb3fcb53b67112f7163509a6a596d1d6985cd8452657941ec6d47e1a237874b832e6061239804f6ad71893c1a38", 0x77, 0x7f}, {&(0x7f0000001400)="8fd0a26e1d543d32ce60882533d6480779b7154787aaefaf8b107b6a56445cf15ece55ffb83ed6f5af84d8265b4e8610b2b066ee0ca2ce98808ede549605f625832ec6cc434a6de5f65bef8e83f0a1e50d4361f7030904113aac1e4a20f3c5851cc5", 0x62, 0x1}, {&(0x7f0000001480)="824a926a4bbb73a8ba6ac498d290bf31b00882925fa45fb112b6db104cfff8704262de", 0x23, 0x4}, {&(0x7f00000014c0)="1955b69a6332b553bcfce5fdc4c3246ebd5bd60972aee4b8cd4e282390b14f64161c78b5254fa77c13e2cfc141d3cf973a0d9754fa9a0ebd052fa3c0146d5dc2a5680118322ae0f2db3af84e12274e49ea3fc4e008632ceebd8e2877cb0c9842a9f2a2fa99b7b6c71d901575857d63aebf07b49e9b9ad0237f18cc0f35d182ce197ad5573cca22af3ee1ebcc6a558c4578a782e3250c6479fbeb4e2585b8577e", 0xa0, 0x40}], 0xa13804, &(0x7f0000001640)={[{'wfdno'}, {}], [{@appraise_type}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@seclabel}]}) openat(r1, &(0x7f00000016c0)='./file1\x00', 0x402, 0x90) close(r0) r2 = epoll_create1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r3) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',Y']) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 18:34:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 6) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) [ 962.593689] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 962.601259] FAULT_INJECTION: forcing a failure. [ 962.601259] name failslab, interval 1, probability 0, space 0, times 0 [ 962.602563] CPU: 0 PID: 7490 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 962.603279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.604179] Call Trace: [ 962.604470] dump_stack+0x107/0x167 [ 962.604866] should_fail.cold+0x5/0xa [ 962.605274] ? create_object.isra.0+0x3a/0xa20 [ 962.605788] should_failslab+0x5/0x20 [ 962.606204] kmem_cache_alloc+0x5b/0x360 [ 962.606648] create_object.isra.0+0x3a/0xa20 [ 962.607115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 962.607671] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 962.608223] ? netlink_sendmsg+0x98e/0xdf0 [ 962.608694] __alloc_skb+0xb1/0x620 [ 962.609088] netlink_sendmsg+0x98e/0xdf0 [ 962.609542] ? netlink_unicast+0x7f0/0x7f0 [ 962.610001] ? netlink_unicast+0x7f0/0x7f0 [ 962.610460] sock_sendmsg+0x154/0x190 [ 962.610878] ____sys_sendmsg+0x70d/0x870 [ 962.611325] ? kernel_sendmsg+0x50/0x50 [ 962.611757] ? do_recvmmsg+0x6d0/0x6d0 [ 962.612191] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.612761] ? lock_downgrade+0x6d0/0x6d0 [ 962.613216] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.613811] ___sys_sendmsg+0xf3/0x170 [ 962.614242] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.614734] ? lock_downgrade+0x6d0/0x6d0 [ 962.615188] ? find_held_lock+0x2c/0x110 [ 962.615630] ? __fget_files+0x296/0x480 [ 962.616058] ? __fget_light+0xea/0x290 [ 962.616481] __sys_sendmsg+0xe5/0x1b0 [ 962.616891] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.617354] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.617867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.618437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.618995] ? trace_hardirqs_on+0x5b/0x180 [ 962.619462] do_syscall_64+0x33/0x40 [ 962.619873] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.620419] RIP: 0033:0x7f3ef36acb19 [ 962.620822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.622782] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.623592] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 962.624350] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.625097] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.625859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.626610] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 962.627905] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 962.634337] FAULT_INJECTION: forcing a failure. [ 962.634337] name failslab, interval 1, probability 0, space 0, times 0 [ 962.637073] CPU: 1 PID: 7473 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 962.638567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.640365] Call Trace: [ 962.640942] dump_stack+0x107/0x167 [ 962.641750] should_fail.cold+0x5/0xa [ 962.642582] ? __alloc_skb+0x6d/0x620 [ 962.643410] should_failslab+0x5/0x20 [ 962.644244] kmem_cache_alloc_node+0x55/0x370 [ 962.645215] ? __alloc_skb+0x24/0x620 [ 962.646064] __alloc_skb+0x6d/0x620 [ 962.646869] netlink_dump+0x735/0x1050 [ 962.647725] ? netlink_insert+0x1640/0x1640 [ 962.648660] ? __mutex_unlock_slowpath+0xe1/0x600 [ 962.649744] __netlink_dump_start+0x649/0x900 [ 962.650732] ctnetlink_get_expect+0x662/0x740 [ 962.651713] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.652982] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 962.654326] ? ctnetlink_get_ct_dying+0x160/0x160 [ 962.655389] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 962.656579] ? do_raw_spin_unlock+0x4f/0x220 [ 962.657545] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.658801] nfnetlink_rcv_msg+0xc40/0xf40 [ 962.659739] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.660656] ? avc_has_extended_perms+0xec0/0xec0 [ 962.661720] ? __lock_acquire+0xbb1/0x5b00 [ 962.662657] ? cred_has_capability.isra.0+0x143/0x2b0 [ 962.663779] ? cred_has_capability.isra.0+0x152/0x2b0 [ 962.664903] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.665980] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.667057] netlink_rcv_skb+0x14b/0x430 [ 962.667947] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.668852] ? netlink_ack+0xab0/0xab0 [ 962.669722] ? ns_capable+0xdd/0x100 [ 962.670546] nfnetlink_rcv+0x1ac/0x420 [ 962.671389] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 962.672424] ? netlink_deliver_tap+0x1c4/0xc40 [ 962.673407] ? is_vmalloc_addr+0x7b/0xb0 [ 962.674317] netlink_unicast+0x549/0x7f0 [ 962.675205] ? netlink_attachskb+0x810/0x810 [ 962.676180] netlink_sendmsg+0x905/0xdf0 [ 962.677069] ? netlink_unicast+0x7f0/0x7f0 [ 962.678033] ? netlink_unicast+0x7f0/0x7f0 [ 962.678955] sock_sendmsg+0x154/0x190 [ 962.679794] ____sys_sendmsg+0x70d/0x870 [ 962.680686] ? kernel_sendmsg+0x50/0x50 [ 962.681557] ? do_recvmmsg+0x6d0/0x6d0 [ 962.682404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.683545] ? lock_downgrade+0x6d0/0x6d0 [ 962.684450] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.685601] ___sys_sendmsg+0xf3/0x170 [ 962.686470] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.687472] ? lock_downgrade+0x6d0/0x6d0 [ 962.688377] ? find_held_lock+0x2c/0x110 [ 962.689268] ? __fget_files+0x296/0x480 [ 962.690158] ? __fget_light+0xea/0x290 [ 962.691016] __sys_sendmsg+0xe5/0x1b0 [ 962.691842] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.692775] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.693813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.694951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.696069] ? trace_hardirqs_on+0x5b/0x180 [ 962.697010] do_syscall_64+0x33/0x40 [ 962.697835] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.698944] RIP: 0033:0x7f8817f78b19 [ 962.699751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.703743] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.705403] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 962.706966] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.708520] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.710104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 962.711665] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 962.715400] FAULT_INJECTION: forcing a failure. [ 962.715400] name failslab, interval 1, probability 0, space 0, times 0 [ 962.715910] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 962.717872] CPU: 1 PID: 7485 Comm: syz-executor.3 Not tainted 5.10.161 #1 [ 962.720244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.722068] Call Trace: [ 962.722644] dump_stack+0x107/0x167 [ 962.723449] should_fail.cold+0x5/0xa [ 962.724289] ? __skb_ext_alloc+0x19/0x90 [ 962.725182] should_failslab+0x5/0x20 [ 962.726012] kmem_cache_alloc+0x5b/0x360 [ 962.726905] __skb_ext_alloc+0x19/0x90 [ 962.727750] skb_ext_add+0x508/0x670 18:34:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 962.728569] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 962.729834] __alloc_skb+0x3c1/0x620 [ 962.730663] netlink_dump+0x735/0x1050 [ 962.731522] ? netlink_insert+0x1640/0x1640 [ 962.732461] ? __mutex_unlock_slowpath+0xe1/0x600 [ 962.733534] ? rwlock_bug.part.0+0x90/0x90 [ 962.734470] __netlink_dump_start+0x649/0x900 [ 962.735453] ? _raw_spin_unlock+0x1a/0x30 [ 962.736363] ctnetlink_get_expect+0x662/0x740 [ 962.737354] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.738615] ? mutex_lock_io_nested+0x1110/0x1110 [ 962.739681] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 962.740931] ? ctnetlink_get_ct_dying+0x160/0x160 [ 962.741916] ? nfnetlink_rcv_msg+0x875/0xf40 [ 962.742835] ? __nla_parse+0x3e/0x50 [ 962.743603] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.744780] nfnetlink_rcv_msg+0xc40/0xf40 [ 962.745678] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.746534] ? avc_has_extended_perms+0xec0/0xec0 [ 962.747512] ? __lock_acquire+0xbb1/0x5b00 [ 962.748385] ? cred_has_capability.isra.0+0x143/0x2b0 [ 962.749431] ? cred_has_capability.isra.0+0x152/0x2b0 [ 962.750490] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.751482] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.752482] netlink_rcv_skb+0x14b/0x430 [ 962.753307] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.754157] ? netlink_ack+0xab0/0xab0 [ 962.754956] ? ns_capable+0xdd/0x100 [ 962.755719] nfnetlink_rcv+0x1ac/0x420 [ 962.756508] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 962.757485] ? netlink_deliver_tap+0x1c4/0xc40 [ 962.758412] ? is_vmalloc_addr+0x7b/0xb0 [ 962.759242] netlink_unicast+0x549/0x7f0 [ 962.760072] ? netlink_attachskb+0x810/0x810 [ 962.761000] netlink_sendmsg+0x905/0xdf0 [ 962.761836] ? netlink_unicast+0x7f0/0x7f0 [ 962.762744] ? netlink_unicast+0x7f0/0x7f0 [ 962.763598] sock_sendmsg+0x154/0x190 [ 962.764380] ____sys_sendmsg+0x70d/0x870 [ 962.765211] ? kernel_sendmsg+0x50/0x50 [ 962.766080] ? do_recvmmsg+0x6d0/0x6d0 [ 962.766971] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.768152] ? lock_downgrade+0x6d0/0x6d0 [ 962.769096] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.770311] ___sys_sendmsg+0xf3/0x170 [ 962.771194] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.772242] ? lock_downgrade+0x6d0/0x6d0 [ 962.773181] ? find_held_lock+0x2c/0x110 [ 962.774117] ? __fget_files+0x296/0x480 [ 962.775031] ? __fget_light+0xea/0x290 [ 962.775918] __sys_sendmsg+0xe5/0x1b0 [ 962.776776] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.777751] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.778712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.779777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.780824] ? trace_hardirqs_on+0x5b/0x180 [ 962.781711] do_syscall_64+0x33/0x40 [ 962.782467] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.783504] RIP: 0033:0x7fbdc24f2b19 [ 962.784254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.787979] RSP: 002b:00007fbdbfa68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.789525] RAX: ffffffffffffffda RBX: 00007fbdc2605f60 RCX: 00007fbdc24f2b19 [ 962.790966] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.792408] RBP: 00007fbdbfa681d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.793886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 962.795493] R13: 00007ffed8fe8b7f R14: 00007fbdbfa68300 R15: 0000000000022000 [ 962.835211] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:34:23 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', r3) [ 962.863376] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 962.865471] FAULT_INJECTION: forcing a failure. [ 962.865471] name failslab, interval 1, probability 0, space 0, times 0 [ 962.867455] CPU: 0 PID: 7508 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 962.868529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.869829] Call Trace: [ 962.870244] dump_stack+0x107/0x167 [ 962.870816] should_fail.cold+0x5/0xa [ 962.871399] should_failslab+0x5/0x20 [ 962.871998] __kmalloc_node_track_caller+0x74/0x3f0 [ 962.872778] ? netlink_dump+0x735/0x1050 [ 962.873407] __alloc_skb+0xb1/0x620 [ 962.874009] netlink_dump+0x735/0x1050 [ 962.874639] ? netlink_insert+0x1640/0x1640 [ 962.875303] ? __mutex_unlock_slowpath+0xe1/0x600 [ 962.876040] ? trace_hardirqs_on+0x5b/0x180 [ 962.876724] __netlink_dump_start+0x649/0x900 [ 962.877414] ctnetlink_get_expect+0x662/0x740 [ 962.878119] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.878995] ? mutex_lock_io_nested+0x1110/0x1110 [ 962.879717] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 962.880673] ? ctnetlink_get_ct_dying+0x160/0x160 [ 962.881433] ? nfnetlink_rcv_msg+0x875/0xf40 [ 962.882157] ? lock_downgrade+0x6d0/0x6d0 [ 962.882822] ? __nla_parse+0x3e/0x50 [ 962.883401] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 962.884295] nfnetlink_rcv_msg+0xc40/0xf40 [ 962.884974] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.885647] ? avc_has_extended_perms+0xec0/0xec0 [ 962.886401] ? __lock_acquire+0xbb1/0x5b00 [ 962.887052] ? cred_has_capability.isra.0+0x143/0x2b0 [ 962.887832] ? cred_has_capability.isra.0+0x152/0x2b0 [ 962.888652] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.889404] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 962.890177] netlink_rcv_skb+0x14b/0x430 [ 962.890788] ? nfnetlink_bind+0x2d0/0x2d0 [ 962.891440] ? netlink_ack+0xab0/0xab0 [ 962.892047] ? ns_capable+0xdd/0x100 [ 962.892624] nfnetlink_rcv+0x1ac/0x420 [ 962.893223] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 962.893981] ? netlink_deliver_tap+0x1c4/0xc40 [ 962.894686] ? is_vmalloc_addr+0x7b/0xb0 [ 962.895321] netlink_unicast+0x549/0x7f0 [ 962.895952] ? netlink_attachskb+0x810/0x810 [ 962.896633] netlink_sendmsg+0x905/0xdf0 [ 962.897268] ? netlink_unicast+0x7f0/0x7f0 [ 962.897952] ? netlink_unicast+0x7f0/0x7f0 [ 962.898600] sock_sendmsg+0x154/0x190 [ 962.899189] ____sys_sendmsg+0x70d/0x870 [ 962.899827] ? kernel_sendmsg+0x50/0x50 [ 962.900433] ? do_recvmmsg+0x6d0/0x6d0 [ 962.901049] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.901876] ? lock_downgrade+0x6d0/0x6d0 [ 962.902538] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.903341] ___sys_sendmsg+0xf3/0x170 [ 962.903953] ? sendmsg_copy_msghdr+0x160/0x160 [ 962.904649] ? lock_downgrade+0x6d0/0x6d0 [ 962.905304] ? find_held_lock+0x2c/0x110 [ 962.905965] ? __fget_files+0x296/0x480 [ 962.906580] ? __fget_light+0xea/0x290 [ 962.907189] __sys_sendmsg+0xe5/0x1b0 [ 962.907785] ? __sys_sendmsg_sock+0xb0/0xb0 [ 962.908450] ? rcu_read_lock_any_held+0x75/0xa0 [ 962.909185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.910006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.910785] ? trace_hardirqs_on+0x5b/0x180 [ 962.911464] do_syscall_64+0x33/0x40 [ 962.912023] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 962.912866] RIP: 0033:0x7ff678c61b19 [ 962.913438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.916342] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.917518] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 962.918626] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 962.919746] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.920836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 962.921972] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 18:34:23 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 7) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:34:23 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 11) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 963.038197] FAULT_INJECTION: forcing a failure. [ 963.038197] name failslab, interval 1, probability 0, space 0, times 0 [ 963.040845] CPU: 1 PID: 7517 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 963.042397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 963.044276] Call Trace: [ 963.044883] dump_stack+0x107/0x167 [ 963.045719] should_fail.cold+0x5/0xa [ 963.046595] ? __skb_ext_alloc+0x19/0x90 [ 963.047521] should_failslab+0x5/0x20 [ 963.048391] kmem_cache_alloc+0x5b/0x360 [ 963.049317] __skb_ext_alloc+0x19/0x90 [ 963.050212] skb_ext_add+0x508/0x670 [ 963.051057] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 963.052253] __alloc_skb+0x3c1/0x620 [ 963.053096] netlink_sendmsg+0x98e/0xdf0 [ 963.054024] ? netlink_unicast+0x7f0/0x7f0 [ 963.054991] ? netlink_unicast+0x7f0/0x7f0 [ 963.055949] sock_sendmsg+0x154/0x190 [ 963.056814] ____sys_sendmsg+0x70d/0x870 [ 963.057741] ? kernel_sendmsg+0x50/0x50 [ 963.058634] ? do_recvmmsg+0x6d0/0x6d0 [ 963.059515] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 963.060696] ? lock_downgrade+0x6d0/0x6d0 [ 963.061654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 963.062839] ___sys_sendmsg+0xf3/0x170 [ 963.063718] ? sendmsg_copy_msghdr+0x160/0x160 [ 963.064770] ? lock_downgrade+0x6d0/0x6d0 [ 963.065724] ? find_held_lock+0x2c/0x110 [ 963.066639] ? __fget_files+0x296/0x480 [ 963.067549] ? __fget_light+0xea/0x290 [ 963.068430] __sys_sendmsg+0xe5/0x1b0 [ 963.069293] ? __sys_sendmsg_sock+0xb0/0xb0 [ 963.070290] ? rcu_read_lock_any_held+0x75/0xa0 [ 963.071363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 963.072549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 963.073723] ? trace_hardirqs_on+0x5b/0x180 [ 963.074703] do_syscall_64+0x33/0x40 [ 963.075548] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 963.076700] RIP: 0033:0x7f3ef36acb19 [ 963.077563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 963.081712] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.083426] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 963.085032] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 963.086657] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 963.088264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.089878] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 963.120411] FAULT_INJECTION: forcing a failure. [ 963.120411] name failslab, interval 1, probability 0, space 0, times 0 [ 963.123050] CPU: 0 PID: 7519 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 963.124442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 963.126145] Call Trace: [ 963.126700] dump_stack+0x107/0x167 [ 963.127453] should_fail.cold+0x5/0xa [ 963.128232] ? create_object.isra.0+0x3a/0xa20 [ 963.129174] should_failslab+0x5/0x20 [ 963.129949] kmem_cache_alloc+0x5b/0x360 [ 963.130792] ? lock_release+0x6b0/0x6b0 [ 963.131610] create_object.isra.0+0x3a/0xa20 [ 963.132494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 963.133551] kmem_cache_alloc_node+0x169/0x370 [ 963.134492] __alloc_skb+0x6d/0x620 [ 963.135246] netlink_dump+0x735/0x1050 [ 963.136050] ? netlink_insert+0x1640/0x1640 [ 963.136928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 963.137925] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 963.138954] ? trace_hardirqs_on+0x5b/0x180 [ 963.139865] __netlink_dump_start+0x649/0x900 [ 963.140773] ctnetlink_get_expect+0x662/0x740 [ 963.141709] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 963.142857] ? mutex_lock_io_nested+0x1110/0x1110 [ 963.143848] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 963.145063] ? ctnetlink_get_ct_dying+0x160/0x160 [ 963.146054] ? nfnetlink_rcv_msg+0x875/0xf40 [ 963.146938] ? lock_downgrade+0x6d0/0x6d0 [ 963.147789] ? __nla_parse+0x3e/0x50 [ 963.148554] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 963.149730] nfnetlink_rcv_msg+0xc40/0xf40 [ 963.150613] ? nfnetlink_bind+0x2d0/0x2d0 [ 963.151468] ? avc_has_extended_perms+0xec0/0xec0 [ 963.152450] ? __lock_acquire+0xbb1/0x5b00 [ 963.153326] ? cred_has_capability.isra.0+0x143/0x2b0 [ 963.154388] ? cred_has_capability.isra.0+0x152/0x2b0 [ 963.155438] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 963.156430] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 963.157430] netlink_rcv_skb+0x14b/0x430 [ 963.158264] ? nfnetlink_bind+0x2d0/0x2d0 [ 963.159106] ? netlink_ack+0xab0/0xab0 [ 963.159912] ? ns_capable+0xdd/0x100 [ 963.160689] nfnetlink_rcv+0x1ac/0x420 [ 963.161485] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 963.162448] ? netlink_deliver_tap+0x1c4/0xc40 [ 963.163372] ? is_vmalloc_addr+0x7b/0xb0 [ 963.164200] netlink_unicast+0x549/0x7f0 [ 963.165032] ? netlink_attachskb+0x810/0x810 [ 963.165954] netlink_sendmsg+0x905/0xdf0 [ 963.166787] ? netlink_unicast+0x7f0/0x7f0 [ 963.167660] ? netlink_unicast+0x7f0/0x7f0 [ 963.168520] sock_sendmsg+0x154/0x190 [ 963.169299] ____sys_sendmsg+0x70d/0x870 [ 963.170141] ? kernel_sendmsg+0x50/0x50 [ 963.170949] ? do_recvmmsg+0x6d0/0x6d0 [ 963.171737] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 963.172797] ? lock_downgrade+0x6d0/0x6d0 [ 963.173655] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 963.174723] ___sys_sendmsg+0xf3/0x170 [ 963.175516] ? sendmsg_copy_msghdr+0x160/0x160 [ 963.176448] ? lock_downgrade+0x6d0/0x6d0 [ 963.177291] ? find_held_lock+0x2c/0x110 [ 963.178138] ? __fget_files+0x296/0x480 [ 963.178957] ? __fget_light+0xea/0x290 [ 963.179753] __sys_sendmsg+0xe5/0x1b0 [ 963.180527] ? __sys_sendmsg_sock+0xb0/0xb0 [ 963.181403] ? rcu_read_lock_any_held+0x75/0xa0 [ 963.182374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 963.183437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 963.184481] ? trace_hardirqs_on+0x5b/0x180 [ 963.185372] do_syscall_64+0x33/0x40 [ 963.186141] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 963.187180] RIP: 0033:0x7f8817f78b19 [ 963.187938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 963.191682] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.193228] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 963.194679] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 963.196124] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 963.197573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.199043] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 18:34:37 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x13) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="ff7766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 18:34:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 8) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:34:37 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 13) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:34:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 15) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:34:37 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', r3) 18:34:37 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 12) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:34:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 976.492974] __nla_validate_parse: 4 callbacks suppressed [ 976.492986] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 976.498491] FAULT_INJECTION: forcing a failure. [ 976.498491] name failslab, interval 1, probability 0, space 0, times 0 [ 976.500568] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 976.501207] CPU: 0 PID: 7541 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 976.504164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.504261] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 976.505864] Call Trace: [ 976.505891] dump_stack+0x107/0x167 [ 976.505922] should_fail.cold+0x5/0xa [ 976.508970] FAULT_INJECTION: forcing a failure. [ 976.508970] name failslab, interval 1, probability 0, space 0, times 0 [ 976.509623] ? create_object.isra.0+0x3a/0xa20 [ 976.509656] should_failslab+0x5/0x20 [ 976.509674] kmem_cache_alloc+0x5b/0x360 [ 976.509696] create_object.isra.0+0x3a/0xa20 [ 976.509715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 976.509738] kmem_cache_alloc+0x159/0x360 [ 976.509762] __skb_ext_alloc+0x19/0x90 [ 976.509777] skb_ext_add+0x508/0x670 [ 976.509796] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 976.509820] __alloc_skb+0x3c1/0x620 [ 976.520576] netlink_sendmsg+0x98e/0xdf0 [ 976.521410] ? netlink_unicast+0x7f0/0x7f0 [ 976.522307] ? netlink_unicast+0x7f0/0x7f0 [ 976.523179] sock_sendmsg+0x154/0x190 [ 976.523965] ____sys_sendmsg+0x70d/0x870 [ 976.524806] ? kernel_sendmsg+0x50/0x50 [ 976.525609] ? do_recvmmsg+0x6d0/0x6d0 [ 976.526423] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.527498] ? lock_downgrade+0x6d0/0x6d0 [ 976.528348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.529418] ___sys_sendmsg+0xf3/0x170 [ 976.530223] ? sendmsg_copy_msghdr+0x160/0x160 [ 976.531157] ? lock_downgrade+0x6d0/0x6d0 [ 976.532011] ? find_held_lock+0x2c/0x110 [ 976.532852] ? __fget_files+0x296/0x480 [ 976.533678] ? __fget_light+0xea/0x290 [ 976.534481] __sys_sendmsg+0xe5/0x1b0 [ 976.535254] ? __sys_sendmsg_sock+0xb0/0xb0 [ 976.536138] ? rcu_read_lock_any_held+0x75/0xa0 [ 976.537102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 976.538186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.539237] ? trace_hardirqs_on+0x5b/0x180 [ 976.540126] do_syscall_64+0x33/0x40 [ 976.540890] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 976.541943] RIP: 0033:0x7f3ef36acb19 [ 976.542704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.546472] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.548031] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 976.549487] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 976.550953] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.552401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.553878] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 976.555369] CPU: 1 PID: 7543 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 976.556020] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 976.556796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.556803] Call Trace: [ 976.556831] dump_stack+0x107/0x167 [ 976.556861] should_fail.cold+0x5/0xa [ 976.562312] should_failslab+0x5/0x20 [ 976.563103] __kmalloc_node_track_caller+0x74/0x3f0 [ 976.564132] ? netlink_dump+0x735/0x1050 [ 976.564970] __alloc_skb+0xb1/0x620 [ 976.565741] netlink_dump+0x735/0x1050 [ 976.566562] ? netlink_insert+0x1640/0x1640 [ 976.567454] ? __mutex_unlock_slowpath+0xe1/0x600 [ 976.568461] ? trace_hardirqs_on+0x5b/0x180 [ 976.568551] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 976.569350] __netlink_dump_start+0x649/0x900 [ 976.569379] ctnetlink_get_expect+0x662/0x740 [ 976.569402] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 976.569428] ? mutex_lock_io_nested+0x1110/0x1110 [ 976.575090] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 976.576329] ? ctnetlink_get_ct_dying+0x160/0x160 [ 976.577324] ? nfnetlink_rcv_msg+0x875/0xf40 [ 976.578235] ? lock_downgrade+0x6d0/0x6d0 [ 976.579095] ? __nla_parse+0x3e/0x50 [ 976.579861] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 976.581034] nfnetlink_rcv_msg+0xc40/0xf40 [ 976.581952] ? nfnetlink_bind+0x2d0/0x2d0 [ 976.582810] ? avc_has_extended_perms+0xec0/0xec0 [ 976.583795] ? __lock_acquire+0xbb1/0x5b00 [ 976.584670] ? cred_has_capability.isra.0+0x143/0x2b0 [ 976.585732] ? cred_has_capability.isra.0+0x152/0x2b0 [ 976.586779] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 976.587780] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 976.588808] netlink_rcv_skb+0x14b/0x430 [ 976.589657] ? nfnetlink_bind+0x2d0/0x2d0 [ 976.590514] ? netlink_ack+0xab0/0xab0 [ 976.591325] ? ns_capable+0xdd/0x100 [ 976.592098] nfnetlink_rcv+0x1ac/0x420 [ 976.592902] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 976.593884] ? netlink_deliver_tap+0x1c4/0xc40 [ 976.594818] ? is_vmalloc_addr+0x7b/0xb0 [ 976.595655] netlink_unicast+0x549/0x7f0 [ 976.596500] ? netlink_attachskb+0x810/0x810 [ 976.597414] netlink_sendmsg+0x905/0xdf0 [ 976.598261] ? netlink_unicast+0x7f0/0x7f0 [ 976.599139] ? netlink_unicast+0x7f0/0x7f0 [ 976.600018] sock_sendmsg+0x154/0x190 [ 976.600796] ____sys_sendmsg+0x70d/0x870 [ 976.601632] ? kernel_sendmsg+0x50/0x50 [ 976.602459] ? do_recvmmsg+0x6d0/0x6d0 [ 976.603256] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.604331] ? lock_downgrade+0x6d0/0x6d0 [ 976.605180] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.606262] ___sys_sendmsg+0xf3/0x170 [ 976.607057] ? sendmsg_copy_msghdr+0x160/0x160 [ 976.608009] ? lock_downgrade+0x6d0/0x6d0 [ 976.608876] ? find_held_lock+0x2c/0x110 [ 976.609738] ? __fget_files+0x296/0x480 [ 976.610570] ? __fget_light+0xea/0x290 [ 976.611379] __sys_sendmsg+0xe5/0x1b0 [ 976.612159] ? __sys_sendmsg_sock+0xb0/0xb0 [ 976.613039] ? rcu_read_lock_any_held+0x75/0xa0 [ 976.614023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 976.615094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.616150] ? trace_hardirqs_on+0x5b/0x180 [ 976.617041] do_syscall_64+0x33/0x40 [ 976.617826] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 976.618868] RIP: 0033:0x7f8817f78b19 [ 976.619629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.623396] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.624954] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 976.626419] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 976.627885] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.629342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.630809] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 976.638950] FAULT_INJECTION: forcing a failure. [ 976.638950] name failslab, interval 1, probability 0, space 0, times 0 [ 976.641650] CPU: 0 PID: 7538 Comm: syz-executor.5 Not tainted 5.10.161 #1 18:34:37 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x108000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="254f9c7cef154ddf89fa42d922defdb971"]) [ 976.643055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.644910] Call Trace: [ 976.645463] dump_stack+0x107/0x167 [ 976.646229] should_fail.cold+0x5/0xa [ 976.647015] ? create_object.isra.0+0x3a/0xa20 [ 976.647957] should_failslab+0x5/0x20 [ 976.648733] kmem_cache_alloc+0x5b/0x360 [ 976.649579] create_object.isra.0+0x3a/0xa20 [ 976.650483] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 976.651530] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 976.652564] ? netlink_dump+0x735/0x1050 [ 976.653399] __alloc_skb+0xb1/0x620 [ 976.654168] netlink_dump+0x735/0x1050 [ 976.654976] ? netlink_insert+0x1640/0x1640 [ 976.655851] ? __mutex_unlock_slowpath+0xe1/0x600 [ 976.656846] ? rwlock_bug.part.0+0x90/0x90 [ 976.657722] __netlink_dump_start+0x649/0x900 [ 976.658659] ? _raw_spin_unlock+0x1a/0x30 [ 976.659509] ctnetlink_get_expect+0x662/0x740 [ 976.660427] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 976.661597] ? mutex_lock_io_nested+0x1110/0x1110 [ 976.662612] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 976.663857] ? ctnetlink_get_ct_dying+0x160/0x160 [ 976.664843] ? nfnetlink_rcv_msg+0x875/0xf40 [ 976.665764] ? __nla_parse+0x3e/0x50 [ 976.666528] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 976.667700] nfnetlink_rcv_msg+0xc40/0xf40 [ 976.668580] ? nfnetlink_bind+0x2d0/0x2d0 [ 976.669440] ? avc_has_extended_perms+0xec0/0xec0 [ 976.670442] ? __lock_acquire+0xbb1/0x5b00 [ 976.671324] ? cred_has_capability.isra.0+0x143/0x2b0 [ 976.672372] ? cred_has_capability.isra.0+0x152/0x2b0 [ 976.673423] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 976.674425] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 976.675432] netlink_rcv_skb+0x14b/0x430 [ 976.676261] ? nfnetlink_bind+0x2d0/0x2d0 [ 976.677109] ? netlink_ack+0xab0/0xab0 [ 976.677930] ? ns_capable+0xdd/0x100 [ 976.678698] nfnetlink_rcv+0x1ac/0x420 [ 976.679495] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 976.680460] ? netlink_deliver_tap+0x1c4/0xc40 [ 976.681391] ? is_vmalloc_addr+0x7b/0xb0 [ 976.682239] netlink_unicast+0x549/0x7f0 [ 976.683081] ? netlink_attachskb+0x810/0x810 [ 976.683992] netlink_sendmsg+0x905/0xdf0 [ 976.684829] ? netlink_unicast+0x7f0/0x7f0 [ 976.685725] ? netlink_unicast+0x7f0/0x7f0 [ 976.686589] sock_sendmsg+0x154/0x190 [ 976.687370] ____sys_sendmsg+0x70d/0x870 [ 976.688204] ? kernel_sendmsg+0x50/0x50 [ 976.689012] ? do_recvmmsg+0x6d0/0x6d0 [ 976.689814] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.690886] ? lock_downgrade+0x6d0/0x6d0 [ 976.691735] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.692807] ___sys_sendmsg+0xf3/0x170 [ 976.693603] ? sendmsg_copy_msghdr+0x160/0x160 [ 976.694556] ? lock_downgrade+0x6d0/0x6d0 [ 976.695403] ? find_held_lock+0x2c/0x110 [ 976.696239] ? __fget_files+0x296/0x480 [ 976.697060] ? __fget_light+0xea/0x290 [ 976.697868] __sys_sendmsg+0xe5/0x1b0 [ 976.698642] ? __sys_sendmsg_sock+0xb0/0xb0 [ 976.699515] ? rcu_read_lock_any_held+0x75/0xa0 [ 976.700478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 976.701545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.702614] ? trace_hardirqs_on+0x5b/0x180 [ 976.703496] do_syscall_64+0x33/0x40 [ 976.704257] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 976.705300] RIP: 0033:0x7ff678c61b19 [ 976.706070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.709795] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.711327] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 976.712768] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 976.714252] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.715734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.717191] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 18:34:37 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 976.774848] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:34:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 976.831012] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 976.834074] FAULT_INJECTION: forcing a failure. [ 976.834074] name failslab, interval 1, probability 0, space 0, times 0 [ 976.836811] CPU: 1 PID: 7567 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 976.838231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.839924] Call Trace: [ 976.840477] dump_stack+0x107/0x167 [ 976.841227] should_fail.cold+0x5/0xa [ 976.842023] ? __skb_ext_alloc+0x19/0x90 [ 976.842867] should_failslab+0x5/0x20 [ 976.843646] kmem_cache_alloc+0x5b/0x360 [ 976.844480] __skb_ext_alloc+0x19/0x90 [ 976.845274] skb_ext_add+0x508/0x670 [ 976.846057] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 976.847132] __alloc_skb+0x3c1/0x620 [ 976.847893] netlink_dump+0x735/0x1050 [ 976.848692] ? netlink_insert+0x1640/0x1640 [ 976.849567] ? __mutex_unlock_slowpath+0xe1/0x600 [ 976.850575] __netlink_dump_start+0x649/0x900 [ 976.851503] ctnetlink_get_expect+0x662/0x740 [ 976.852420] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 976.853589] ? mutex_lock_io_nested+0x1110/0x1110 [ 976.854583] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 976.855814] ? ctnetlink_get_ct_dying+0x160/0x160 [ 976.856799] ? nfnetlink_rcv_msg+0x875/0xf40 [ 976.857707] ? lock_downgrade+0x6d0/0x6d0 [ 976.858567] ? __nla_parse+0x3e/0x50 [ 976.859328] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 976.860503] nfnetlink_rcv_msg+0xc40/0xf40 [ 976.861392] ? nfnetlink_bind+0x2d0/0x2d0 [ 976.862260] ? avc_has_extended_perms+0xec0/0xec0 [ 976.863246] ? __lock_acquire+0xbb1/0x5b00 [ 976.864128] ? cred_has_capability.isra.0+0x143/0x2b0 [ 976.865187] ? cred_has_capability.isra.0+0x152/0x2b0 [ 976.866260] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 976.866420] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 976.867266] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 976.867295] netlink_rcv_skb+0x14b/0x430 [ 976.867315] ? nfnetlink_bind+0x2d0/0x2d0 [ 976.867337] ? netlink_ack+0xab0/0xab0 [ 976.867367] ? ns_capable+0xdd/0x100 [ 976.867394] nfnetlink_rcv+0x1ac/0x420 [ 976.867414] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 976.867441] ? netlink_deliver_tap+0x1c4/0xc40 [ 976.876000] ? is_vmalloc_addr+0x7b/0xb0 [ 976.876840] netlink_unicast+0x549/0x7f0 [ 976.877688] ? netlink_attachskb+0x810/0x810 [ 976.878599] netlink_sendmsg+0x905/0xdf0 [ 976.879438] ? netlink_unicast+0x7f0/0x7f0 [ 976.880319] ? netlink_unicast+0x7f0/0x7f0 [ 976.881187] sock_sendmsg+0x154/0x190 [ 976.881985] ____sys_sendmsg+0x70d/0x870 [ 976.882823] ? kernel_sendmsg+0x50/0x50 [ 976.883632] ? do_recvmmsg+0x6d0/0x6d0 [ 976.884426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.885501] ? lock_downgrade+0x6d0/0x6d0 [ 976.886371] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 976.887460] ___sys_sendmsg+0xf3/0x170 [ 976.888256] ? sendmsg_copy_msghdr+0x160/0x160 [ 976.889195] ? lock_downgrade+0x6d0/0x6d0 [ 976.890074] ? find_held_lock+0x2c/0x110 [ 976.890918] ? __fget_files+0x296/0x480 [ 976.891746] ? __fget_light+0xea/0x290 [ 976.892547] __sys_sendmsg+0xe5/0x1b0 [ 976.893351] ? __sys_sendmsg_sock+0xb0/0xb0 [ 976.894245] ? rcu_read_lock_any_held+0x75/0xa0 [ 976.895220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 976.896303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.897363] ? trace_hardirqs_on+0x5b/0x180 [ 976.898261] do_syscall_64+0x33/0x40 [ 976.899028] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 976.900071] RIP: 0033:0x7ff678c61b19 [ 976.900832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.904606] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.906165] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 976.907628] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 976.909104] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.910591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.912049] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 18:34:37 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 13) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:34:37 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', r3) 18:34:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 9) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) [ 976.948193] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 976.952062] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 976.972050] FAULT_INJECTION: forcing a failure. [ 976.972050] name failslab, interval 1, probability 0, space 0, times 0 [ 976.975045] CPU: 1 PID: 7573 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 976.976453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.978178] Call Trace: [ 976.978728] dump_stack+0x107/0x167 [ 976.979483] should_fail.cold+0x5/0xa [ 976.980266] ? create_object.isra.0+0x3a/0xa20 [ 976.981010] FAULT_INJECTION: forcing a failure. [ 976.981010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.981252] should_failslab+0x5/0x20 [ 976.984381] kmem_cache_alloc+0x5b/0x360 [ 976.985223] create_object.isra.0+0x3a/0xa20 [ 976.986135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 976.987181] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 976.988222] ? netlink_dump+0x735/0x1050 [ 976.989069] __alloc_skb+0xb1/0x620 [ 976.989833] netlink_dump+0x735/0x1050 [ 976.990635] ? netlink_insert+0x1640/0x1640 [ 976.991518] ? __mutex_unlock_slowpath+0xe1/0x600 [ 976.992517] ? __netlink_dump_start+0x641/0x900 [ 976.993478] __netlink_dump_start+0x649/0x900 [ 976.994422] ctnetlink_get_expect+0x662/0x740 [ 976.995348] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 976.996523] ? mutex_lock_io_nested+0x1110/0x1110 [ 976.997514] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 976.998767] ? ctnetlink_get_ct_dying+0x160/0x160 [ 976.999758] ? nfnetlink_rcv_msg+0x875/0xf40 [ 977.000656] ? lock_downgrade+0x6d0/0x6d0 [ 977.001515] ? __nla_parse+0x3e/0x50 [ 977.002303] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 977.003482] nfnetlink_rcv_msg+0xc40/0xf40 [ 977.004368] ? nfnetlink_bind+0x2d0/0x2d0 [ 977.005233] ? avc_has_extended_perms+0xec0/0xec0 [ 977.006231] ? __lock_acquire+0xbb1/0x5b00 [ 977.007114] ? cred_has_capability.isra.0+0x143/0x2b0 [ 977.008168] ? cred_has_capability.isra.0+0x152/0x2b0 [ 977.009223] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 977.010240] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 977.011254] netlink_rcv_skb+0x14b/0x430 [ 977.012090] ? nfnetlink_bind+0x2d0/0x2d0 [ 977.012942] ? netlink_ack+0xab0/0xab0 [ 977.013756] ? ns_capable+0xdd/0x100 [ 977.014525] nfnetlink_rcv+0x1ac/0x420 [ 977.015326] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 977.016297] ? netlink_deliver_tap+0x1c4/0xc40 [ 977.017231] ? is_vmalloc_addr+0x7b/0xb0 [ 977.018088] netlink_unicast+0x549/0x7f0 [ 977.018931] ? netlink_attachskb+0x810/0x810 [ 977.019847] netlink_sendmsg+0x905/0xdf0 [ 977.020686] ? netlink_unicast+0x7f0/0x7f0 [ 977.021567] ? netlink_unicast+0x7f0/0x7f0 [ 977.022448] sock_sendmsg+0x154/0x190 [ 977.023238] ____sys_sendmsg+0x70d/0x870 [ 977.024078] ? kernel_sendmsg+0x50/0x50 [ 977.024889] ? do_recvmmsg+0x6d0/0x6d0 [ 977.025692] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 977.026773] ? lock_downgrade+0x6d0/0x6d0 [ 977.027625] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 977.028705] ___sys_sendmsg+0xf3/0x170 [ 977.029504] ? sendmsg_copy_msghdr+0x160/0x160 [ 977.030464] ? lock_downgrade+0x6d0/0x6d0 [ 977.031320] ? find_held_lock+0x2c/0x110 [ 977.032168] ? __fget_files+0x296/0x480 [ 977.032998] ? __fget_light+0xea/0x290 [ 977.033812] __sys_sendmsg+0xe5/0x1b0 [ 977.034589] ? __sys_sendmsg_sock+0xb0/0xb0 [ 977.035472] ? rcu_read_lock_any_held+0x75/0xa0 [ 977.036445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 977.037521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 977.038591] ? trace_hardirqs_on+0x5b/0x180 [ 977.039480] do_syscall_64+0x33/0x40 [ 977.040249] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 977.041302] RIP: 0033:0x7f8817f78b19 [ 977.042079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 977.045866] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.047427] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 977.048895] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 977.050364] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 977.051832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 977.053288] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 977.054952] CPU: 0 PID: 7575 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 977.056361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 977.058061] Call Trace: [ 977.058607] dump_stack+0x107/0x167 [ 977.059350] should_fail.cold+0x5/0xa [ 977.060134] _copy_from_iter_full+0x1ff/0x940 [ 977.061049] ? __check_object_size+0x319/0x440 [ 977.061998] netlink_sendmsg+0x86f/0xdf0 [ 977.062831] ? netlink_unicast+0x7f0/0x7f0 [ 977.063702] ? netlink_unicast+0x7f0/0x7f0 [ 977.064564] sock_sendmsg+0x154/0x190 [ 977.065341] ____sys_sendmsg+0x70d/0x870 [ 977.066183] ? kernel_sendmsg+0x50/0x50 [ 977.066989] ? do_recvmmsg+0x6d0/0x6d0 [ 977.067785] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 977.068852] ? lock_downgrade+0x6d0/0x6d0 [ 977.069717] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 977.070787] ___sys_sendmsg+0xf3/0x170 [ 977.071579] ? sendmsg_copy_msghdr+0x160/0x160 [ 977.072513] ? lock_downgrade+0x6d0/0x6d0 [ 977.073359] ? find_held_lock+0x2c/0x110 [ 977.074207] ? __fget_files+0x296/0x480 [ 977.075025] ? __fget_light+0xea/0x290 [ 977.075821] __sys_sendmsg+0xe5/0x1b0 [ 977.076592] ? __sys_sendmsg_sock+0xb0/0xb0 [ 977.077467] ? rcu_read_lock_any_held+0x75/0xa0 [ 977.078449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 977.079518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 977.080567] ? trace_hardirqs_on+0x5b/0x180 [ 977.081446] do_syscall_64+0x33/0x40 [ 977.082211] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 977.083252] RIP: 0033:0x7f3ef36acb19 [ 977.084008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 977.087753] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.089301] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 977.090768] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 977.092218] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 977.093679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.095129] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 18:34:49 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 14) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:34:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:34:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 10) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:34:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:34:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:34:50 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000300), 0x2288025, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '((/'}}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000380), 0x2, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@msize}, {@version_9p2000}, {@dfltuid}, {@cache_loose}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '-:'}}]}}) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="74cb1c6e733d66642c7266646e6e3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x20000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x5, &(0x7f0000000140)=[{0x4, 0x6, 0x0, 0x3ff}, {0x81, 0x4, 0x1, 0x77}, {0x8, 0x3, 0x5, 0x3}, {0x400, 0x8, 0x8b, 0x1}, {0x200, 0x1f, 0x4, 0x2}]}) sendfile(r3, r7, &(0x7f0000000280), 0xffffffffffffff80) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c650801e461", @ANYRESDEC=r8, @ANYBLOB=',\x00']) 18:34:50 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x0, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:50 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', 0x0, r3) [ 989.471103] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 989.472482] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 989.476486] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 989.483005] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 989.487987] FAULT_INJECTION: forcing a failure. [ 989.487987] name failslab, interval 1, probability 0, space 0, times 0 [ 989.491074] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 989.493097] CPU: 0 PID: 7586 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 989.494471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 989.496130] Call Trace: [ 989.496659] dump_stack+0x107/0x167 [ 989.497405] should_fail.cold+0x5/0xa [ 989.498205] ? __alloc_skb+0x6d/0x620 [ 989.498976] should_failslab+0x5/0x20 [ 989.499753] kmem_cache_alloc_node+0x55/0x370 [ 989.500668] __alloc_skb+0x6d/0x620 [ 989.501416] netlink_dump+0x735/0x1050 [ 989.502233] ? netlink_insert+0x1640/0x1640 [ 989.503102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 989.504075] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 989.505172] ? __mutex_lock+0x425/0x1260 [ 989.506011] __netlink_dump_start+0x649/0x900 [ 989.506917] ? ctnetlink_get_expect+0x94/0x740 [ 989.507840] ctnetlink_get_expect+0x662/0x740 [ 989.508750] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.509916] ? mutex_lock_io_nested+0x1110/0x1110 [ 989.510256] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 989.510885] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 989.510902] ? ctnetlink_get_ct_dying+0x160/0x160 [ 989.510924] ? nfnetlink_rcv_msg+0x875/0xf40 [ 989.510944] ? lock_downgrade+0x6d0/0x6d0 [ 989.510972] ? __nla_parse+0x3e/0x50 [ 989.510994] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.511016] nfnetlink_rcv_msg+0xc40/0xf40 [ 989.511052] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.511084] ? avc_has_extended_perms+0xec0/0xec0 [ 989.511105] ? __lock_acquire+0xbb1/0x5b00 [ 989.511140] ? cred_has_capability.isra.0+0x143/0x2b0 [ 989.511157] ? cred_has_capability.isra.0+0x152/0x2b0 [ 989.511176] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.511200] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.526040] netlink_rcv_skb+0x14b/0x430 [ 989.526866] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.527721] ? netlink_ack+0xab0/0xab0 [ 989.528517] ? ns_capable+0xdd/0x100 [ 989.529278] nfnetlink_rcv+0x1ac/0x420 [ 989.530072] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 989.531034] ? netlink_deliver_tap+0x1c4/0xc40 [ 989.531955] ? is_vmalloc_addr+0x7b/0xb0 [ 989.532781] netlink_unicast+0x549/0x7f0 [ 989.533613] ? netlink_attachskb+0x810/0x810 [ 989.534534] netlink_sendmsg+0x905/0xdf0 [ 989.535370] ? netlink_unicast+0x7f0/0x7f0 [ 989.536246] ? netlink_unicast+0x7f0/0x7f0 [ 989.537103] sock_sendmsg+0x154/0x190 [ 989.537885] ____sys_sendmsg+0x70d/0x870 [ 989.538705] ? kernel_sendmsg+0x50/0x50 [ 989.539498] ? do_recvmmsg+0x6d0/0x6d0 [ 989.540285] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.541337] ? lock_downgrade+0x6d0/0x6d0 [ 989.542178] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.543231] ___sys_sendmsg+0xf3/0x170 [ 989.544012] ? sendmsg_copy_msghdr+0x160/0x160 [ 989.544934] ? lock_downgrade+0x6d0/0x6d0 [ 989.545767] ? find_held_lock+0x2c/0x110 [ 989.546610] ? __fget_files+0x296/0x480 [ 989.547425] ? __fget_light+0xea/0x290 [ 989.548212] __sys_sendmsg+0xe5/0x1b0 [ 989.548976] ? __sys_sendmsg_sock+0xb0/0xb0 [ 989.549846] ? rcu_read_lock_any_held+0x75/0xa0 [ 989.550798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 989.551851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 989.552889] ? trace_hardirqs_on+0x5b/0x180 [ 989.553762] do_syscall_64+0x33/0x40 [ 989.554515] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 989.555547] RIP: 0033:0x7f3ef36acb19 [ 989.556295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 989.559986] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.561510] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 18:34:50 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000000)='./file1\x00') setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@cache_mmap}, {@access_client}, {@noextend}, {@fscache}, {@loose}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_client}, {@debug={'debug', 0x3d, 0xffffffffffffffb1}}]}}) [ 989.562941] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 989.564496] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 989.565955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 989.567395] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 989.570287] FAULT_INJECTION: forcing a failure. [ 989.570287] name failslab, interval 1, probability 0, space 0, times 0 [ 989.573187] CPU: 1 PID: 7592 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 989.574608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 989.576322] Call Trace: [ 989.576864] dump_stack+0x107/0x167 [ 989.577617] should_fail.cold+0x5/0xa [ 989.578414] ? create_object.isra.0+0x3a/0xa20 [ 989.579365] should_failslab+0x5/0x20 [ 989.580151] kmem_cache_alloc+0x5b/0x360 [ 989.580995] create_object.isra.0+0x3a/0xa20 [ 989.581915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 989.582984] kmem_cache_alloc+0x159/0x360 [ 989.583835] __skb_ext_alloc+0x19/0x90 [ 989.584635] skb_ext_add+0x508/0x670 [ 989.585401] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 989.586499] __alloc_skb+0x3c1/0x620 [ 989.587290] netlink_dump+0x735/0x1050 [ 989.588099] ? netlink_insert+0x1640/0x1640 [ 989.588979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 989.589985] ? rwlock_bug.part.0+0x90/0x90 [ 989.590846] __netlink_dump_start+0x649/0x900 [ 989.591780] ? _raw_spin_unlock+0x1a/0x30 [ 989.592638] ctnetlink_get_expect+0x662/0x740 [ 989.593565] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.594743] ? mutex_lock_io_nested+0x1110/0x1110 [ 989.595746] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 989.596996] ? ctnetlink_get_ct_dying+0x160/0x160 [ 989.598012] ? nfnetlink_rcv_msg+0x875/0xf40 [ 989.598945] ? __nla_parse+0x3e/0x50 [ 989.599720] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.600920] nfnetlink_rcv_msg+0xc40/0xf40 [ 989.601850] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.602740] ? avc_has_extended_perms+0xec0/0xec0 [ 989.603836] ? __lock_acquire+0xbb1/0x5b00 [ 989.604724] ? cred_has_capability.isra.0+0x143/0x2b0 [ 989.605775] ? cred_has_capability.isra.0+0x152/0x2b0 [ 989.606906] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.607915] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.608929] netlink_rcv_skb+0x14b/0x430 [ 989.609762] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.610633] ? netlink_ack+0xab0/0xab0 [ 989.611453] ? ns_capable+0xdd/0x100 [ 989.612231] nfnetlink_rcv+0x1ac/0x420 [ 989.613031] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 989.614030] ? netlink_deliver_tap+0x1c4/0xc40 [ 989.614959] ? is_vmalloc_addr+0x7b/0xb0 [ 989.615780] netlink_unicast+0x549/0x7f0 [ 989.616619] ? netlink_attachskb+0x810/0x810 [ 989.617532] netlink_sendmsg+0x905/0xdf0 [ 989.618404] ? netlink_unicast+0x7f0/0x7f0 [ 989.619450] ? netlink_unicast+0x7f0/0x7f0 [ 989.620527] sock_sendmsg+0x154/0x190 [ 989.621499] ____sys_sendmsg+0x70d/0x870 [ 989.622507] ? kernel_sendmsg+0x50/0x50 [ 989.623342] ? do_recvmmsg+0x6d0/0x6d0 [ 989.624140] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.625208] ? lock_downgrade+0x6d0/0x6d0 [ 989.626100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.627175] ___sys_sendmsg+0xf3/0x170 [ 989.627970] ? sendmsg_copy_msghdr+0x160/0x160 [ 989.628915] ? lock_downgrade+0x6d0/0x6d0 [ 989.629759] ? find_held_lock+0x2c/0x110 [ 989.630628] ? __fget_files+0x296/0x480 [ 989.631459] ? __fget_light+0xea/0x290 [ 989.632264] __sys_sendmsg+0xe5/0x1b0 [ 989.633043] ? __sys_sendmsg_sock+0xb0/0xb0 [ 989.633941] ? rcu_read_lock_any_held+0x75/0xa0 [ 989.634935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 989.636009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 989.637058] ? trace_hardirqs_on+0x5b/0x180 [ 989.637998] do_syscall_64+0x33/0x40 [ 989.638766] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 989.639828] RIP: 0033:0x7ff678c61b19 [ 989.640597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 989.644399] RSP: 002b:00007ff6761d7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.645988] RAX: ffffffffffffffda RBX: 00007ff678d74f60 RCX: 00007ff678c61b19 [ 989.647458] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 989.648924] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 989.650405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 989.651851] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 989.659040] FAULT_INJECTION: forcing a failure. [ 989.659040] name failslab, interval 1, probability 0, space 0, times 0 [ 989.661399] CPU: 1 PID: 7589 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 989.662806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 989.664496] Call Trace: [ 989.665048] dump_stack+0x107/0x167 [ 989.665788] should_fail.cold+0x5/0xa [ 989.666596] ? __skb_ext_alloc+0x19/0x90 [ 989.667437] should_failslab+0x5/0x20 [ 989.668217] kmem_cache_alloc+0x5b/0x360 [ 989.669056] __skb_ext_alloc+0x19/0x90 [ 989.669862] skb_ext_add+0x508/0x670 [ 989.670641] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 989.671712] __alloc_skb+0x3c1/0x620 [ 989.672482] netlink_dump+0x735/0x1050 [ 989.673290] ? netlink_insert+0x1640/0x1640 [ 989.674171] ? __mutex_unlock_slowpath+0xe1/0x600 [ 989.675146] ? rwlock_bug.part.0+0x90/0x90 [ 989.676021] __netlink_dump_start+0x649/0x900 [ 989.676935] ? _raw_spin_unlock+0x1a/0x30 [ 989.677782] ctnetlink_get_expect+0x662/0x740 [ 989.678725] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.679917] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 989.681146] ? ctnetlink_get_ct_dying+0x160/0x160 [ 989.682173] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 989.683288] ? nfnetlink_rcv_msg+0x8d3/0xf40 [ 989.684182] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.685347] nfnetlink_rcv_msg+0xc40/0xf40 [ 989.686254] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.687116] ? avc_has_extended_perms+0xec0/0xec0 [ 989.688094] ? __lock_acquire+0xbb1/0x5b00 [ 989.688964] ? cred_has_capability.isra.0+0x143/0x2b0 [ 989.690043] ? cred_has_capability.isra.0+0x152/0x2b0 [ 989.691104] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.692097] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.693103] netlink_rcv_skb+0x14b/0x430 [ 989.693949] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.694796] ? netlink_ack+0xab0/0xab0 [ 989.695613] ? ns_capable+0xdd/0x100 [ 989.696378] nfnetlink_rcv+0x1ac/0x420 [ 989.697172] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 989.698163] ? netlink_deliver_tap+0x1c4/0xc40 [ 989.699085] ? is_vmalloc_addr+0x7b/0xb0 [ 989.699928] netlink_unicast+0x549/0x7f0 [ 989.700754] ? netlink_attachskb+0x810/0x810 [ 989.701659] netlink_sendmsg+0x905/0xdf0 [ 989.702530] ? netlink_unicast+0x7f0/0x7f0 [ 989.703411] ? netlink_unicast+0x7f0/0x7f0 [ 989.704271] sock_sendmsg+0x154/0x190 [ 989.705051] ____sys_sendmsg+0x70d/0x870 [ 989.705891] ? kernel_sendmsg+0x50/0x50 [ 989.706715] ? do_recvmmsg+0x6d0/0x6d0 [ 989.707580] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.708644] ? lock_downgrade+0x6d0/0x6d0 [ 989.709505] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.710606] ___sys_sendmsg+0xf3/0x170 [ 989.711409] ? sendmsg_copy_msghdr+0x160/0x160 [ 989.712360] ? lock_downgrade+0x6d0/0x6d0 [ 989.713213] ? find_held_lock+0x2c/0x110 [ 989.714080] ? __fget_files+0x296/0x480 [ 989.714902] ? __fget_light+0xea/0x290 [ 989.715704] __sys_sendmsg+0xe5/0x1b0 [ 989.716484] ? __sys_sendmsg_sock+0xb0/0xb0 [ 989.717376] ? rcu_read_lock_any_held+0x75/0xa0 [ 989.718371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 989.719447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 989.720498] ? trace_hardirqs_on+0x5b/0x180 [ 989.721484] do_syscall_64+0x33/0x40 [ 989.722472] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 989.723769] RIP: 0033:0x7f8817f78b19 [ 989.724724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 989.728908] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.730488] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 989.731953] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 989.733398] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 989.734893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 989.736352] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 989.787366] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 18:34:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 11) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:34:50 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x0, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:34:50 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', 0x0, r3) 18:34:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 989.835029] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 989.841729] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:34:50 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 15) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 989.902043] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:34:50 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x7, 0x1000, 0x7, 0x800, 0xfffffffe, 0x6}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:34:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) (fail_nth: 16) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 989.928028] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:34:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 989.935341] FAULT_INJECTION: forcing a failure. [ 989.935341] name failslab, interval 1, probability 0, space 0, times 0 [ 989.938005] CPU: 0 PID: 7628 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 989.939376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 989.941025] Call Trace: [ 989.941558] dump_stack+0x107/0x167 [ 989.942302] should_fail.cold+0x5/0xa [ 989.943064] ? __skb_ext_alloc+0x19/0x90 [ 989.943878] should_failslab+0x5/0x20 [ 989.944639] kmem_cache_alloc+0x5b/0x360 [ 989.945459] __skb_ext_alloc+0x19/0x90 [ 989.946278] skb_ext_add+0x508/0x670 [ 989.947038] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 989.948117] __alloc_skb+0x3c1/0x620 [ 989.948887] netlink_dump+0x735/0x1050 [ 989.949689] ? netlink_insert+0x1640/0x1640 [ 989.950571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 989.951566] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 989.952589] ? trace_hardirqs_on+0x5b/0x180 [ 989.953466] __netlink_dump_start+0x649/0x900 [ 989.954387] ctnetlink_get_expect+0x662/0x740 [ 989.955315] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.956486] ? mutex_lock_io_nested+0x1110/0x1110 [ 989.957463] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 989.958700] ? ctnetlink_get_ct_dying+0x160/0x160 [ 989.959685] ? nfnetlink_rcv_msg+0x875/0xf40 [ 989.960567] ? lock_downgrade+0x6d0/0x6d0 [ 989.961429] ? __nla_parse+0x3e/0x50 [ 989.962184] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 989.963335] nfnetlink_rcv_msg+0xc40/0xf40 [ 989.964199] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.965041] ? avc_has_extended_perms+0xec0/0xec0 [ 989.966026] ? __lock_acquire+0xbb1/0x5b00 [ 989.966889] ? cred_has_capability.isra.0+0x143/0x2b0 [ 989.967917] ? cred_has_capability.isra.0+0x152/0x2b0 [ 989.968947] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.969935] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 989.970945] netlink_rcv_skb+0x14b/0x430 [ 989.971772] ? nfnetlink_bind+0x2d0/0x2d0 [ 989.972628] ? netlink_ack+0xab0/0xab0 [ 989.973434] ? ns_capable+0xdd/0x100 [ 989.974204] nfnetlink_rcv+0x1ac/0x420 [ 989.975005] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 989.975971] ? netlink_deliver_tap+0x1c4/0xc40 [ 989.976896] ? is_vmalloc_addr+0x7b/0xb0 [ 989.977732] netlink_unicast+0x549/0x7f0 [ 989.978592] ? netlink_attachskb+0x810/0x810 [ 989.979499] netlink_sendmsg+0x905/0xdf0 [ 989.980344] ? netlink_unicast+0x7f0/0x7f0 [ 989.981216] ? netlink_unicast+0x7f0/0x7f0 [ 989.982096] sock_sendmsg+0x154/0x190 [ 989.982873] ____sys_sendmsg+0x70d/0x870 [ 989.983713] ? kernel_sendmsg+0x50/0x50 [ 989.984519] ? do_recvmmsg+0x6d0/0x6d0 [ 989.985321] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.986413] ? lock_downgrade+0x6d0/0x6d0 [ 989.987261] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.988330] ___sys_sendmsg+0xf3/0x170 [ 989.989129] ? sendmsg_copy_msghdr+0x160/0x160 [ 989.990075] ? lock_downgrade+0x6d0/0x6d0 [ 989.990922] ? find_held_lock+0x2c/0x110 [ 989.991762] ? __fget_files+0x296/0x480 [ 989.992588] ? __fget_light+0xea/0x290 [ 989.993386] __sys_sendmsg+0xe5/0x1b0 [ 989.994160] ? __sys_sendmsg_sock+0xb0/0xb0 [ 989.995041] ? rcu_read_lock_any_held+0x75/0xa0 [ 989.996004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 989.997072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 989.998137] ? trace_hardirqs_on+0x5b/0x180 [ 989.999017] do_syscall_64+0x33/0x40 [ 989.999775] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 990.000822] RIP: 0033:0x7f8817f78b19 [ 990.001581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.005281] RSP: 002b:00007f88154ee188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.006847] RAX: ffffffffffffffda RBX: 00007f881808bf60 RCX: 00007f8817f78b19 [ 990.008298] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 990.009749] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.011222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.012680] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 [ 990.013954] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 990.016118] EXT4-fs (loop2): group descriptors corrupted! [ 990.018490] FAULT_INJECTION: forcing a failure. [ 990.018490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.021300] CPU: 1 PID: 7632 Comm: syz-executor.5 Not tainted 5.10.161 #1 [ 990.022708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.024405] Call Trace: [ 990.024951] dump_stack+0x107/0x167 [ 990.025698] should_fail.cold+0x5/0xa [ 990.026497] _copy_to_user+0x2e/0x180 [ 990.027281] simple_read_from_buffer+0xcc/0x160 [ 990.028236] proc_fail_nth_read+0x198/0x230 [ 990.029118] ? proc_sessionid_read+0x230/0x230 [ 990.030053] ? security_file_permission+0x24e/0x570 [ 990.031067] ? perf_trace_initcall_start+0x101/0x380 [ 990.032115] ? proc_sessionid_read+0x230/0x230 [ 990.033046] vfs_read+0x228/0x580 [ 990.033763] ksys_read+0x12d/0x260 [ 990.034498] ? vfs_write+0xa30/0xa30 [ 990.035269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.036364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.037428] do_syscall_64+0x33/0x40 [ 990.038208] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 990.039256] RIP: 0033:0x7ff678c1469c [ 990.040002] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 990.040186] FAULT_INJECTION: forcing a failure. [ 990.040186] name failslab, interval 1, probability 0, space 0, times 0 [ 990.043755] RSP: 002b:00007ff6761d7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 990.043791] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007ff678c1469c [ 990.043801] RDX: 000000000000000f RSI: 00007ff6761d71e0 RDI: 0000000000000007 [ 990.043812] RBP: 00007ff6761d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.043822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.043832] R13: 00007ffe04d9090f R14: 00007ff6761d7300 R15: 0000000000022000 [ 990.056648] CPU: 0 PID: 7627 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 990.058056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.059742] Call Trace: [ 990.060280] dump_stack+0x107/0x167 [ 990.061023] should_fail.cold+0x5/0xa [ 990.061800] ? create_object.isra.0+0x3a/0xa20 [ 990.062750] should_failslab+0x5/0x20 [ 990.063526] kmem_cache_alloc+0x5b/0x360 [ 990.064348] ? lock_release+0x6b0/0x6b0 [ 990.065156] create_object.isra.0+0x3a/0xa20 [ 990.066064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.067105] kmem_cache_alloc_node+0x169/0x370 [ 990.068041] __alloc_skb+0x6d/0x620 18:34:50 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x0, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 990.068789] netlink_dump+0x735/0x1050 [ 990.069753] ? netlink_insert+0x1640/0x1640 [ 990.070641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 990.071631] ? trace_hardirqs_on+0x5b/0x180 [ 990.072516] __netlink_dump_start+0x649/0x900 [ 990.073441] ctnetlink_get_expect+0x662/0x740 [ 990.074360] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 990.075519] ? mutex_lock_io_nested+0x1110/0x1110 [ 990.076494] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 990.077722] ? ctnetlink_get_ct_dying+0x160/0x160 [ 990.078711] ? nfnetlink_rcv_msg+0x875/0xf40 [ 990.079604] ? lock_downgrade+0x6d0/0x6d0 [ 990.080454] ? __nla_parse+0x3e/0x50 [ 990.081218] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 990.082410] nfnetlink_rcv_msg+0xc40/0xf40 [ 990.083281] ? nfnetlink_bind+0x2d0/0x2d0 [ 990.084135] ? avc_has_extended_perms+0xec0/0xec0 [ 990.085103] ? __lock_acquire+0xbb1/0x5b00 [ 990.085984] ? cred_has_capability.isra.0+0x143/0x2b0 [ 990.087026] ? cred_has_capability.isra.0+0x152/0x2b0 [ 990.088058] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 990.089036] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 990.090052] netlink_rcv_skb+0x14b/0x430 [ 990.090868] ? nfnetlink_bind+0x2d0/0x2d0 [ 990.091701] ? netlink_ack+0xab0/0xab0 [ 990.092494] ? ns_capable+0xdd/0x100 [ 990.093268] nfnetlink_rcv+0x1ac/0x420 [ 990.094061] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 990.095023] ? netlink_deliver_tap+0x1c4/0xc40 [ 990.095938] ? is_vmalloc_addr+0x7b/0xb0 [ 990.096780] netlink_unicast+0x549/0x7f0 [ 990.097601] ? netlink_attachskb+0x810/0x810 [ 990.098529] netlink_sendmsg+0x905/0xdf0 [ 990.099366] ? netlink_unicast+0x7f0/0x7f0 [ 990.100228] ? netlink_unicast+0x7f0/0x7f0 [ 990.101088] sock_sendmsg+0x154/0x190 [ 990.101860] ____sys_sendmsg+0x70d/0x870 [ 990.102680] ? kernel_sendmsg+0x50/0x50 [ 990.103475] ? do_recvmmsg+0x6d0/0x6d0 [ 990.104257] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 990.105322] ___sys_sendmsg+0xf3/0x170 [ 990.106113] ? sendmsg_copy_msghdr+0x160/0x160 [ 990.107035] ? lock_downgrade+0x6d0/0x6d0 [ 990.107881] ? trace_hardirqs_on+0x5b/0x180 [ 990.108747] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 990.109851] ? __fget_files+0x296/0x480 [ 990.110676] ? __fget_light+0xea/0x290 [ 990.111461] __sys_sendmsg+0xe5/0x1b0 [ 990.112240] ? __sys_sendmsg_sock+0xb0/0xb0 [ 990.113126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.114207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.115246] ? trace_hardirqs_on+0x5b/0x180 [ 990.116136] do_syscall_64+0x33/0x40 [ 990.116885] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 990.117926] RIP: 0033:0x7f3ef36acb19 [ 990.118674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.122365] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.123890] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 990.125330] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 990.126768] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.128197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.129629] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 18:34:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:34:50 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', 0x0, r3) 18:34:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:34:50 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 16) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:34:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:34:50 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="5d9c56fc2485193330c6c41fc86b2c6266a1021b216da1d40e0e9e1893d334e25434427c409f8e0685557a655473091e82aa739c5f1117fa2f68aa30c73e35bcf09af47cad4d691cc664218b46c37a9af22286ec82a92e13adb71143dabc29f7e4f7ce025e8abcd66f"]) 18:34:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 990.354127] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 990.356471] EXT4-fs (loop2): group descriptors corrupted! [ 990.378443] FAULT_INJECTION: forcing a failure. [ 990.378443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.382065] CPU: 1 PID: 7659 Comm: syz-executor.7 Not tainted 5.10.161 #1 [ 990.383713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.385437] Call Trace: [ 990.385994] dump_stack+0x107/0x167 [ 990.386745] should_fail.cold+0x5/0xa [ 990.387535] _copy_to_user+0x2e/0x180 [ 990.388319] simple_read_from_buffer+0xcc/0x160 [ 990.389278] proc_fail_nth_read+0x198/0x230 [ 990.390184] ? proc_sessionid_read+0x230/0x230 [ 990.391124] ? security_file_permission+0x24e/0x570 [ 990.392126] ? perf_trace_initcall_start+0x101/0x380 [ 990.393158] ? proc_sessionid_read+0x230/0x230 [ 990.394081] vfs_read+0x228/0x580 [ 990.394789] ksys_read+0x12d/0x260 [ 990.395507] ? vfs_write+0xa30/0xa30 [ 990.396271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.397323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.398395] do_syscall_64+0x33/0x40 [ 990.399148] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 990.400203] RIP: 0033:0x7f8817f2b69c [ 990.400956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 990.404737] RSP: 002b:00007f88154ee170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 990.406302] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007f8817f2b69c [ 990.407759] RDX: 000000000000000f RSI: 00007f88154ee1e0 RDI: 0000000000000007 [ 990.409217] RBP: 00007f88154ee1d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.410673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.412124] R13: 00007ffc9dbfbc4f R14: 00007f88154ee300 R15: 0000000000022000 18:35:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 12) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:35:01 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:35:01 executing program 4: r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) clone3(&(0x7f0000000280)={0x400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0), {0x1b}, &(0x7f0000001280)=""/4096, 0x1000, &(0x7f00000001c0)=""/144, &(0x7f0000000140)=[r0, r3, r4, 0x0, r0, r0, r0, r0, r0], 0x9, {r1}}, 0x58) 18:35:01 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:01 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:35:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:35:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 1001.365543] __nla_validate_parse: 10 callbacks suppressed [ 1001.365553] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1001.367041] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1001.367072] FAULT_INJECTION: forcing a failure. [ 1001.367072] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.367083] CPU: 1 PID: 7669 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 1001.367089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1001.367093] Call Trace: [ 1001.367113] dump_stack+0x107/0x167 [ 1001.367125] should_fail.cold+0x5/0xa [ 1001.367141] should_failslab+0x5/0x20 [ 1001.367152] __kmalloc_node_track_caller+0x74/0x3f0 [ 1001.367163] ? netlink_dump+0x735/0x1050 [ 1001.367178] __alloc_skb+0xb1/0x620 [ 1001.367192] netlink_dump+0x735/0x1050 [ 1001.367206] ? netlink_insert+0x1640/0x1640 [ 1001.367215] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1001.367231] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1001.367242] ? trace_hardirqs_on+0x5b/0x180 [ 1001.367266] __netlink_dump_start+0x649/0x900 [ 1001.378244] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1001.378537] ctnetlink_get_expect+0x662/0x740 [ 1001.378550] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1001.378567] ? mutex_lock_io_nested+0x1110/0x1110 [ 1001.382179] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 1001.382818] ? ctnetlink_get_ct_dying+0x160/0x160 [ 1001.383342] ? nfnetlink_rcv_msg+0x875/0xf40 [ 1001.383820] ? lock_downgrade+0x6d0/0x6d0 [ 1001.384269] ? __nla_parse+0x3e/0x50 [ 1001.384663] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1001.385287] nfnetlink_rcv_msg+0xc40/0xf40 [ 1001.385748] ? nfnetlink_bind+0x2d0/0x2d0 [ 1001.386209] ? avc_has_extended_perms+0xec0/0xec0 [ 1001.386726] ? __lock_acquire+0xbb1/0x5b00 [ 1001.387190] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1001.387728] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1001.388277] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1001.388798] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1001.389323] netlink_rcv_skb+0x14b/0x430 [ 1001.389753] ? nfnetlink_bind+0x2d0/0x2d0 [ 1001.390207] ? netlink_ack+0xab0/0xab0 [ 1001.390636] ? ns_capable+0xdd/0x100 [ 1001.391038] nfnetlink_rcv+0x1ac/0x420 [ 1001.391466] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 1001.391968] ? netlink_deliver_tap+0x1c4/0xc40 [ 1001.392462] ? is_vmalloc_addr+0x7b/0xb0 [ 1001.392899] netlink_unicast+0x549/0x7f0 [ 1001.393337] ? netlink_attachskb+0x810/0x810 [ 1001.393817] netlink_sendmsg+0x905/0xdf0 [ 1001.394269] ? netlink_unicast+0x7f0/0x7f0 [ 1001.394723] ? netlink_unicast+0x7f0/0x7f0 [ 1001.395183] sock_sendmsg+0x154/0x190 [ 1001.395589] ____sys_sendmsg+0x70d/0x870 [ 1001.396028] ? kernel_sendmsg+0x50/0x50 [ 1001.396448] ? do_recvmmsg+0x6d0/0x6d0 [ 1001.396870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1001.397355] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1001.397427] ? lock_downgrade+0x6d0/0x6d0 [ 1001.399711] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1001.400272] ___sys_sendmsg+0xf3/0x170 [ 1001.400682] ? sendmsg_copy_msghdr+0x160/0x160 [ 1001.401171] ? lock_downgrade+0x6d0/0x6d0 [ 1001.401623] ? find_held_lock+0x2c/0x110 [ 1001.402068] ? __fget_files+0x296/0x480 [ 1001.402492] ? __fget_light+0xea/0x290 [ 1001.402907] __sys_sendmsg+0xe5/0x1b0 [ 1001.403317] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1001.403781] ? rcu_read_lock_any_held+0x75/0xa0 [ 1001.404282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1001.404840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1001.405061] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1001.405390] ? trace_hardirqs_on+0x5b/0x180 [ 1001.405403] do_syscall_64+0x33/0x40 [ 1001.405413] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1001.405421] RIP: 0033:0x7f3ef36acb19 [ 1001.405432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1001.405447] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.411781] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 1001.412529] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1001.413281] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1001.414049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.414805] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 1001.418223] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1001.449539] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1001.451635] EXT4-fs (loop2): group descriptors corrupted! 18:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 13) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) [ 1012.600129] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:35:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:35:13 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:35:13 executing program 4: prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000300), 0x200081, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7700a300003d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write(r1, &(0x7f00000001c0)="989230d294b130b72ecb0104477350de6e1598a60a45d31e4385859d48896be300bb07ec2feda85d8b42144d99982a186c7cf24ac2c45cd14d49b2f76eefed2d084f5eeebd3ce9b6b4f1796c9986f02181139b33ab9bbf387a4a4a57a2d781123381fa7ca031547b103aabbb9a648eb9ea0801a6d0c89e13981d8f16786960b586be4ccbdc96bb553a8a7eef39b86e732df2826f43d217c5d4c33ca10f62e717e0b8e575b3473f4136258fe6c32faae2bf28eb4077eff7687b311f6046f814441d763c0b10d1ed65f8726a625631b6247dcf6600d4d7460b993fbdeb", 0xdc) 18:35:13 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:13 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:35:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 1012.621500] 9pnet: Insufficient options for proto=fd [ 1012.625458] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1012.629143] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1012.637592] FAULT_INJECTION: forcing a failure. [ 1012.637592] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.639103] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1012.641127] CPU: 0 PID: 7705 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 1012.641141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1012.641149] Call Trace: [ 1012.641179] dump_stack+0x107/0x167 [ 1012.641206] should_fail.cold+0x5/0xa [ 1012.641231] ? create_object.isra.0+0x3a/0xa20 [ 1012.641261] should_failslab+0x5/0x20 [ 1012.644988] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1012.646593] kmem_cache_alloc+0x5b/0x360 [ 1012.646625] create_object.isra.0+0x3a/0xa20 [ 1012.646658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1012.647524] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1012.648037] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1012.648063] ? netlink_dump+0x735/0x1050 [ 1012.659238] __alloc_skb+0xb1/0x620 [ 1012.660104] netlink_dump+0x735/0x1050 [ 1012.661029] ? netlink_insert+0x1640/0x1640 [ 1012.662039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1012.663192] ? trace_hardirqs_on+0x5b/0x180 [ 1012.664207] __netlink_dump_start+0x649/0x900 [ 1012.665266] ctnetlink_get_expect+0x662/0x740 [ 1012.666339] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1012.667690] ? mutex_lock_io_nested+0x1110/0x1110 [ 1012.668812] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 1012.670245] ? ctnetlink_get_ct_dying+0x160/0x160 [ 1012.671377] ? nfnetlink_rcv_msg+0x875/0xf40 [ 1012.672405] ? lock_downgrade+0x6d0/0x6d0 [ 1012.673383] ? __nla_parse+0x3e/0x50 [ 1012.674276] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1012.675619] nfnetlink_rcv_msg+0xc40/0xf40 [ 1012.676624] ? nfnetlink_bind+0x2d0/0x2d0 [ 1012.677601] ? avc_has_extended_perms+0xec0/0xec0 [ 1012.678734] ? __lock_acquire+0xbb1/0x5b00 [ 1012.679728] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1012.680914] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1012.682136] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1012.683264] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1012.684402] netlink_rcv_skb+0x14b/0x430 [ 1012.685337] ? nfnetlink_bind+0x2d0/0x2d0 [ 1012.686317] ? netlink_ack+0xab0/0xab0 [ 1012.687228] ? ns_capable+0xdd/0x100 [ 1012.688097] nfnetlink_rcv+0x1ac/0x420 [ 1012.688993] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 1012.690082] ? netlink_deliver_tap+0x1c4/0xc40 [ 1012.691137] ? is_vmalloc_addr+0x7b/0xb0 [ 1012.692081] netlink_unicast+0x549/0x7f0 [ 1012.693027] ? netlink_attachskb+0x810/0x810 [ 1012.694041] netlink_sendmsg+0x905/0xdf0 [ 1012.694999] ? netlink_unicast+0x7f0/0x7f0 [ 1012.695981] ? netlink_unicast+0x7f0/0x7f0 [ 1012.696951] sock_sendmsg+0x154/0x190 [ 1012.697821] ____sys_sendmsg+0x70d/0x870 [ 1012.698975] ? kernel_sendmsg+0x50/0x50 [ 1012.699942] ? do_recvmmsg+0x6d0/0x6d0 [ 1012.700890] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1012.702188] ? lock_downgrade+0x6d0/0x6d0 [ 1012.703199] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1012.704456] ___sys_sendmsg+0xf3/0x170 [ 1012.705401] ? sendmsg_copy_msghdr+0x160/0x160 [ 1012.706513] ? lock_downgrade+0x6d0/0x6d0 [ 1012.707522] ? find_held_lock+0x2c/0x110 [ 1012.708505] ? __fget_files+0x296/0x480 [ 1012.709476] ? __fget_light+0xea/0x290 [ 1012.710434] __sys_sendmsg+0xe5/0x1b0 [ 1012.711374] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1012.712417] ? rcu_read_lock_any_held+0x75/0xa0 [ 1012.713564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1012.714847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1012.715895] ? trace_hardirqs_on+0x5b/0x180 [ 1012.716770] do_syscall_64+0x33/0x40 [ 1012.717527] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1012.718569] RIP: 0033:0x7f3ef36acb19 [ 1012.719323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1012.723061] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.724615] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 1012.726058] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1012.727507] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1012.728953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1012.730401] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 1012.740501] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1012.750928] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1012.756876] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1012.768092] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:35:13 executing program 4: r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) ioprio_set$pid(0x1, r1, 0x0) r2 = fork() r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x0) r4 = getpgid(r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) clone3(&(0x7f0000000440)={0x100100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/103, 0x67, &(0x7f0000000340)=""/200, &(0x7f0000000280)=[r0, r1, r0, r2, r3, r4], 0x6, {r5}}, 0x58) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r7) r8 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b6170dfe20d92374f08c1df0227886ad402f12ef3fbc31b30c12651096c8c96c53a5aa531d4cd01e31749e3b128372583a033b80250dedfac8ce18e4e353999f9615f7b5703adb7beba1545aab4ba2b3ce21c274de8daa5de280016599c48bdf5d3fe8a63526d1", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 18:35:13 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1012.846051] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:35:13 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:35:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:13 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 14) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:35:13 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1012.952681] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:35:13 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:13 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x0, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1013.102586] FAULT_INJECTION: forcing a failure. [ 1013.102586] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.105070] CPU: 1 PID: 7760 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 1013.106144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.107421] Call Trace: [ 1013.107829] dump_stack+0x107/0x167 [ 1013.108397] should_fail.cold+0x5/0xa [ 1013.108979] ? __skb_ext_alloc+0x19/0x90 [ 1013.109596] should_failslab+0x5/0x20 [ 1013.110207] kmem_cache_alloc+0x5b/0x360 [ 1013.110838] __skb_ext_alloc+0x19/0x90 [ 1013.111442] skb_ext_add+0x508/0x670 [ 1013.112022] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 1013.112847] __alloc_skb+0x3c1/0x620 [ 1013.113436] netlink_dump+0x735/0x1050 [ 1013.114052] ? netlink_insert+0x1640/0x1640 [ 1013.114740] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1013.115505] ? trace_hardirqs_on+0x5b/0x180 [ 1013.116186] __netlink_dump_start+0x649/0x900 [ 1013.116895] ctnetlink_get_expect+0x662/0x740 [ 1013.117578] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1013.118495] ? mutex_lock_io_nested+0x1110/0x1110 [ 1013.119255] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 1013.120202] ? ctnetlink_get_ct_dying+0x160/0x160 [ 1013.120956] ? nfnetlink_rcv_msg+0x875/0xf40 [ 1013.121647] ? lock_downgrade+0x6d0/0x6d0 [ 1013.122341] ? __nla_parse+0x3e/0x50 [ 1013.122925] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1013.123828] nfnetlink_rcv_msg+0xc40/0xf40 [ 1013.124508] ? nfnetlink_bind+0x2d0/0x2d0 [ 1013.125165] ? avc_has_extended_perms+0xec0/0xec0 [ 1013.125924] ? __lock_acquire+0xbb1/0x5b00 [ 1013.126609] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1013.127410] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1013.128220] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1013.128984] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1013.129757] netlink_rcv_skb+0x14b/0x430 [ 1013.130417] ? nfnetlink_bind+0x2d0/0x2d0 [ 1013.131070] ? netlink_ack+0xab0/0xab0 [ 1013.131687] ? ns_capable+0xdd/0x100 [ 1013.132276] nfnetlink_rcv+0x1ac/0x420 [ 1013.132888] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 1013.133638] ? netlink_deliver_tap+0x1c4/0xc40 [ 1013.134364] ? is_vmalloc_addr+0x7b/0xb0 [ 1013.135007] netlink_unicast+0x549/0x7f0 [ 1013.135649] ? netlink_attachskb+0x810/0x810 [ 1013.136346] netlink_sendmsg+0x905/0xdf0 [ 1013.136996] ? netlink_unicast+0x7f0/0x7f0 [ 1013.137668] ? netlink_unicast+0x7f0/0x7f0 [ 1013.138342] sock_sendmsg+0x154/0x190 [ 1013.138951] ____sys_sendmsg+0x70d/0x870 [ 1013.139591] ? kernel_sendmsg+0x50/0x50 [ 1013.140211] ? do_recvmmsg+0x6d0/0x6d0 [ 1013.140820] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1013.141642] ? lock_downgrade+0x6d0/0x6d0 [ 1013.142314] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1013.143144] ___sys_sendmsg+0xf3/0x170 [ 1013.143762] ? sendmsg_copy_msghdr+0x160/0x160 [ 1013.144485] ? lock_downgrade+0x6d0/0x6d0 [ 1013.145140] ? find_held_lock+0x2c/0x110 [ 1013.145787] ? __fget_files+0x296/0x480 [ 1013.146429] ? __fget_light+0xea/0x290 [ 1013.147044] __sys_sendmsg+0xe5/0x1b0 [ 1013.147643] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1013.148320] ? rcu_read_lock_any_held+0x75/0xa0 [ 1013.149062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1013.149886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1013.150703] ? trace_hardirqs_on+0x5b/0x180 [ 1013.151379] do_syscall_64+0x33/0x40 [ 1013.151963] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1013.152779] RIP: 0033:0x7f3ef36acb19 [ 1013.153373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.156291] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.157491] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 1013.158622] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1013.159761] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1013.160886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.162003] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 18:35:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:35:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:35:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 15) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:35:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:35:25 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:35:25 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:25 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:25 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r4) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYRES64=r2, @ANYRESHEX=r1, @ANYBLOB="2c0069ca2a5171f34931f60ec73ce86cb66505142f98fd4f55e377cc8da3b5746eb081e2fd2752b39d327edf15d700e1d7c49b4fec01fecf5cbd89af6d6098d9d271700ab229b96281f924fde1f0bed37b2e787b60388a35b5b3a17ab20d131a4b9f5a38a30a9518a24947ea4a2a2a54043d17fce264d5b692b9b402fd584f1515b00ef673ee29fb89183f7c894fd17728c5a36f26fd9796267055495f6511cc1e"]) [ 1024.957426] __nla_validate_parse: 12 callbacks suppressed [ 1024.957434] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1024.961840] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1024.964425] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1024.967539] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1024.969559] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1024.972397] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1024.973400] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1024.974813] FAULT_INJECTION: forcing a failure. [ 1024.974813] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.976392] CPU: 1 PID: 7791 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 1024.977102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.977988] Call Trace: [ 1024.978278] dump_stack+0x107/0x167 [ 1024.978662] should_fail.cold+0x5/0xa [ 1024.979085] ? create_object.isra.0+0x3a/0xa20 [ 1024.979580] should_failslab+0x5/0x20 [ 1024.979999] kmem_cache_alloc+0x5b/0x360 [ 1024.980447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1024.981030] create_object.isra.0+0x3a/0xa20 [ 1024.981479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1024.982053] kmem_cache_alloc+0x159/0x360 [ 1024.982490] __skb_ext_alloc+0x19/0x90 [ 1024.982899] skb_ext_add+0x508/0x670 [ 1024.983304] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 1024.983883] __alloc_skb+0x3c1/0x620 [ 1024.984286] netlink_dump+0x735/0x1050 [ 1024.984714] ? netlink_insert+0x1640/0x1640 [ 1024.985157] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1024.985707] ? trace_hardirqs_on+0x5b/0x180 [ 1024.986153] __netlink_dump_start+0x649/0x900 [ 1024.986664] ctnetlink_get_expect+0x662/0x740 [ 1024.987131] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1024.987764] ? mutex_lock_io_nested+0x1110/0x1110 [ 1024.988259] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 1024.988918] ? ctnetlink_get_ct_dying+0x160/0x160 [ 1024.989407] ? nfnetlink_rcv_msg+0x875/0xf40 [ 1024.989884] ? lock_downgrade+0x6d0/0x6d0 [ 1024.990321] ? __nla_parse+0x3e/0x50 [ 1024.990712] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1024.991339] nfnetlink_rcv_msg+0xc40/0xf40 [ 1024.991793] ? nfnetlink_bind+0x2d0/0x2d0 [ 1024.992235] ? avc_has_extended_perms+0xec0/0xec0 [ 1024.992737] ? __lock_acquire+0xbb1/0x5b00 [ 1024.993190] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1024.993722] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1024.994268] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1024.994776] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1024.995275] netlink_rcv_skb+0x14b/0x430 [ 1024.995710] ? nfnetlink_bind+0x2d0/0x2d0 [ 1024.996149] ? netlink_ack+0xab0/0xab0 [ 1024.996562] ? ns_capable+0xdd/0x100 [ 1024.996957] nfnetlink_rcv+0x1ac/0x420 [ 1024.997372] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 1024.997867] ? netlink_deliver_tap+0x1c4/0xc40 [ 1024.998359] ? is_vmalloc_addr+0x7b/0xb0 [ 1024.998777] netlink_unicast+0x549/0x7f0 [ 1024.999210] ? netlink_attachskb+0x810/0x810 [ 1024.999685] netlink_sendmsg+0x905/0xdf0 [ 1025.000116] ? netlink_unicast+0x7f0/0x7f0 [ 1025.000571] ? netlink_unicast+0x7f0/0x7f0 [ 1025.001018] sock_sendmsg+0x154/0x190 [ 1025.001420] ____sys_sendmsg+0x70d/0x870 [ 1025.001851] ? kernel_sendmsg+0x50/0x50 [ 1025.002266] ? do_recvmmsg+0x6d0/0x6d0 [ 1025.002657] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1025.003210] ? lock_downgrade+0x6d0/0x6d0 [ 1025.003651] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1025.004209] ___sys_sendmsg+0xf3/0x170 [ 1025.004606] ? sendmsg_copy_msghdr+0x160/0x160 [ 1025.005096] ? lock_downgrade+0x6d0/0x6d0 [ 1025.005522] ? find_held_lock+0x2c/0x110 [ 1025.005957] ? __fget_files+0x296/0x480 [ 1025.006372] ? __fget_light+0xea/0x290 [ 1025.006782] __sys_sendmsg+0xe5/0x1b0 [ 1025.007180] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1025.007611] ? rcu_read_lock_any_held+0x75/0xa0 [ 1025.008111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1025.008636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1025.009172] ? trace_hardirqs_on+0x5b/0x180 [ 1025.009606] do_syscall_64+0x33/0x40 [ 1025.010005] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1025.010521] RIP: 0033:0x7f3ef36acb19 [ 1025.010915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1025.012737] RSP: 002b:00007f3ef0c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1025.013525] RAX: ffffffffffffffda RBX: 00007f3ef37bff60 RCX: 00007f3ef36acb19 [ 1025.014238] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1025.014987] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1025.015728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1025.016475] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 1025.021704] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:35:25 executing program 6: r0 = clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) ioprio_set$pid(0x1, r1, 0x0) r2 = fork() r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x0) r4 = getpgid(r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r5) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) clone3(&(0x7f0000000440)={0x100100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0), {0x2d}, &(0x7f0000000200)=""/103, 0x67, &(0x7f0000000340)=""/200, &(0x7f0000000280)=[r0, r1, r0, r2, r3, r4], 0x6, {r5}}, 0x58) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r7) r8 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b6170dfe20d92374f08c1df0227886ad402f12ef3fbc31b30c12651096c8c96c53a5aa531d4cd01e31749e3b128372583a033b80250dedfac8ce18e4e353999f9615f7b5703adb7beba1545aab4ba2b3ce21c274de8daa5de280016599c48bdf5d3fe8a63526d1", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 18:35:25 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1025.082227] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:35:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:35:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:25 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x0) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x162, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1025.159396] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1025.162949] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1025.168251] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:35:38 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 18:35:38 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:35:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1038.343187] __nla_validate_parse: 3 callbacks suppressed [ 1038.343194] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1038.344472] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1038.357492] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1038.359443] FAULT_INJECTION: forcing a failure. [ 1038.359443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.360865] CPU: 0 PID: 7839 Comm: syz-executor.0 Not tainted 5.10.161 #1 [ 1038.361612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.362530] Call Trace: [ 1038.362822] dump_stack+0x107/0x167 [ 1038.363217] should_fail.cold+0x5/0xa [ 1038.363663] _copy_to_user+0x2e/0x180 [ 1038.364088] simple_read_from_buffer+0xcc/0x160 [ 1038.364631] proc_fail_nth_read+0x198/0x230 [ 1038.365109] ? proc_sessionid_read+0x230/0x230 [ 1038.365626] ? security_file_permission+0x24e/0x570 [ 1038.366189] ? perf_trace_initcall_start+0x101/0x380 [ 1038.366767] ? proc_sessionid_read+0x230/0x230 [ 1038.367288] vfs_read+0x228/0x580 [ 1038.367667] ksys_read+0x12d/0x260 [ 1038.368057] ? vfs_write+0xa30/0xa30 [ 1038.368499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1038.369087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1038.369669] do_syscall_64+0x33/0x40 [ 1038.370092] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1038.370681] RIP: 0033:0x7f3ef365f69c [ 1038.371085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1038.373174] RSP: 002b:00007f3ef0c22170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1038.374049] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007f3ef365f69c [ 1038.374850] RDX: 000000000000000f RSI: 00007f3ef0c221e0 RDI: 0000000000000007 [ 1038.375298] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1038.375642] RBP: 00007f3ef0c221d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.375648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1038.375655] R13: 00007fffa2d2e82f R14: 00007f3ef0c22300 R15: 0000000000022000 [ 1038.376529] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1038.380097] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1038.386634] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1038.399463] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1038.409215] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1038.420230] 9pnet: Insufficient options for proto=fd 18:35:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) (fail_nth: 16) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:35:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:35:38 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(0xffffffffffffffff, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:35:38 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c1977914c6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2, 0x495, 0xfffffffffffffff9, 0x2, 0x1, 0x4}) 18:35:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:35:39 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) mknodat(r0, &(0x7f0000000140)='./file1\x00', 0x8000, 0x75) close(r0) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) pread64(r1, &(0x7f00000001c0)=""/209, 0xd1, 0x6b91) [ 1038.457491] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1038.464150] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:35:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:35:51 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = epoll_create1(0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) 18:35:51 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:35:51 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(0xffffffffffffffff, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1050.998560] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1051.000258] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1051.002022] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1051.005181] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:35:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:35:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xec0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1051.012443] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.036364] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:35:51 executing program 4: clone3(&(0x7f0000001200)={0xa811ad00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x20000, &(0x7f0000000000)=ANY=[@ANYBLOB="2a97df6c8ef65d99d21299350c7a005467123d1a61a4e04517a33bcd99b4dd6f787f9e0577a7c366137d2c5da094e3676a000c4fac77efd3a9bd3a57378209f990c21fe381bc5b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'netdevsim0\x00'}) [ 1051.045577] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1051.076525] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1051.091162] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:35:51 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(0xffffffffffffffff, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:35:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:35:51 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1051.135778] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1051.143177] FAULT_INJECTION: forcing a failure. [ 1051.143177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.144665] CPU: 0 PID: 7911 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1051.145495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.146439] Call Trace: [ 1051.146769] dump_stack+0x107/0x167 [ 1051.147181] should_fail.cold+0x5/0xa [ 1051.147641] _copy_from_user+0x2e/0x1b0 [ 1051.148098] __copy_msghdr_from_user+0x91/0x4b0 [ 1051.148652] ? __ia32_sys_shutdown+0x80/0x80 [ 1051.149172] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1051.149757] ? __lock_acquire+0x1657/0x5b00 [ 1051.150275] ? __lock_acquire+0xbb1/0x5b00 [ 1051.150759] sendmsg_copy_msghdr+0xa1/0x160 [ 1051.151272] ? do_recvmmsg+0x6d0/0x6d0 [ 1051.151729] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1051.152312] ? lock_downgrade+0x6d0/0x6d0 [ 1051.152792] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1051.153407] ___sys_sendmsg+0xc6/0x170 [ 1051.153876] ? sendmsg_copy_msghdr+0x160/0x160 [ 1051.154419] ? __fget_files+0x26d/0x480 [ 1051.154909] ? lock_downgrade+0x6d0/0x6d0 [ 1051.155394] ? find_held_lock+0x2c/0x110 [ 1051.155879] ? __fget_files+0x296/0x480 [ 1051.156352] ? __fget_light+0xea/0x290 [ 1051.156797] __sys_sendmsg+0xe5/0x1b0 [ 1051.157244] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1051.157745] ? rcu_read_lock_any_held+0x75/0xa0 [ 1051.158292] ? fput_many+0x2f/0x1a0 [ 1051.158738] ? ksys_write+0x1a9/0x260 [ 1051.159192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.159807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.160389] ? trace_hardirqs_on+0x5b/0x180 [ 1051.160910] do_syscall_64+0x33/0x40 [ 1051.161352] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1051.161955] RIP: 0033:0x7effb53e1b19 [ 1051.162399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.164592] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.165490] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1051.166336] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1051.167197] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1051.168021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.168867] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1051.176293] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:35:51 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:35:51 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:35:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:35:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 1051.262942] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1062.082560] FAULT_INJECTION: forcing a failure. [ 1062.082560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.083975] CPU: 1 PID: 7937 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1062.084714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.085612] Call Trace: [ 1062.085913] dump_stack+0x107/0x167 [ 1062.086312] should_fail.cold+0x5/0xa [ 1062.086736] _copy_from_user+0x2e/0x1b0 [ 1062.087176] iovec_from_user+0x141/0x400 [ 1062.087626] __import_iovec+0x67/0x590 [ 1062.088052] ? __ia32_sys_shutdown+0x80/0x80 [ 1062.088522] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.089097] import_iovec+0x83/0xb0 [ 1062.089488] sendmsg_copy_msghdr+0x131/0x160 [ 1062.089965] ? do_recvmmsg+0x6d0/0x6d0 [ 1062.090392] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.090958] ? lock_downgrade+0x6d0/0x6d0 [ 1062.091403] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.091984] ___sys_sendmsg+0xc6/0x170 [ 1062.092415] ? sendmsg_copy_msghdr+0x160/0x160 [ 1062.092930] ? __fget_files+0x26d/0x480 [ 1062.093371] ? lock_downgrade+0x6d0/0x6d0 [ 1062.093832] ? find_held_lock+0x2c/0x110 [ 1062.094291] ? __fget_files+0x296/0x480 [ 1062.094720] ? __fget_light+0xea/0x290 [ 1062.095183] __sys_sendmsg+0xe5/0x1b0 [ 1062.095619] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1062.096118] ? rcu_read_lock_any_held+0x75/0xa0 [ 1062.096653] ? fput_many+0x2f/0x1a0 [ 1062.097062] ? ksys_write+0x1a9/0x260 [ 1062.097493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.098083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.098674] ? trace_hardirqs_on+0x5b/0x180 [ 1062.099170] do_syscall_64+0x33/0x40 [ 1062.099586] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1062.100164] RIP: 0033:0x7effb53e1b19 [ 1062.100565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.102648] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.103521] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1062.104318] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1062.105085] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1062.105883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.106694] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1062.116728] __nla_validate_parse: 6 callbacks suppressed [ 1062.116734] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1062.119768] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:36:02 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x6201, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:36:02 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:36:02 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x0, 0xff}) close(r0) r1 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f0000001280)="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", 0x1000, 0x2}, {&(0x7f0000000100), 0x0, 0x9}], 0x3060021, &(0x7f00000001c0)={[{@dots}], [{@subj_user={'subj_user', 0x3d, '%]'}}, {@euid_gt={'euid>', 0xee00}}]}) r2 = openat(r1, &(0x7f0000000200)='./file1\x00', 0x10401, 0x122) openat(r2, &(0x7f0000000240)='./file1\x00', 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x880, 0x102) creat(&(0x7f0000000280)='./file2\x00', 0xc4273df389bc1575) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 18:36:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:02 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 1062.124155] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1062.126881] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1062.132373] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1062.134582] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1062.137938] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1062.145239] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1062.183159] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:36:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:36:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:02 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:02 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:02 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:02 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) open(&(0x7f0000000000)='./file1\x00', 0x1, 0xf8) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1062.254132] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1062.266998] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:36:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xc00e, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1062.307008] FAULT_INJECTION: forcing a failure. [ 1062.307008] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.308555] CPU: 1 PID: 7970 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1062.309301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1062.310196] Call Trace: [ 1062.310486] dump_stack+0x107/0x167 [ 1062.310904] should_fail.cold+0x5/0xa [ 1062.311322] ? __alloc_skb+0x6d/0x620 [ 1062.311736] should_failslab+0x5/0x20 [ 1062.312150] kmem_cache_alloc_node+0x55/0x370 [ 1062.312651] __alloc_skb+0x6d/0x620 [ 1062.313062] netlink_sendmsg+0x98e/0xdf0 [ 1062.313506] ? netlink_unicast+0x7f0/0x7f0 [ 1062.313978] ? netlink_unicast+0x7f0/0x7f0 [ 1062.314452] sock_sendmsg+0x154/0x190 [ 1062.314884] ____sys_sendmsg+0x70d/0x870 [ 1062.315336] ? kernel_sendmsg+0x50/0x50 [ 1062.315775] ? do_recvmmsg+0x6d0/0x6d0 [ 1062.316211] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.316794] ? lock_downgrade+0x6d0/0x6d0 [ 1062.317252] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1062.317834] ___sys_sendmsg+0xf3/0x170 [ 1062.318267] ? sendmsg_copy_msghdr+0x160/0x160 [ 1062.318801] ? lock_downgrade+0x6d0/0x6d0 [ 1062.319286] ? find_held_lock+0x2c/0x110 [ 1062.319734] ? __fget_files+0x296/0x480 [ 1062.320172] ? __fget_light+0xea/0x290 [ 1062.320607] __sys_sendmsg+0xe5/0x1b0 [ 1062.321033] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1062.321512] ? rcu_read_lock_any_held+0x75/0xa0 [ 1062.322030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1062.322609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1062.323210] ? trace_hardirqs_on+0x5b/0x180 [ 1062.323690] do_syscall_64+0x33/0x40 [ 1062.324103] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1062.324685] RIP: 0033:0x7effb53e1b19 [ 1062.325097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1062.327162] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.328030] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1062.328855] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1062.329653] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1062.330437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.331252] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1062.341832] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:36:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:02 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:13 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:13 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1073.074938] __nla_validate_parse: 10 callbacks suppressed [ 1073.074946] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1073.077952] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1073.093526] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1073.093540] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1073.097162] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7", 0x2d, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:36:13 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) close(r1) r2 = mq_open(&(0x7f0000000140)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) epoll_create(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:13 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1073.112488] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1073.116191] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1073.123015] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1073.124259] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1073.128217] FAULT_INJECTION: forcing a failure. [ 1073.128217] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.131024] CPU: 0 PID: 8015 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1073.132533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1073.134264] Call Trace: [ 1073.134842] dump_stack+0x107/0x167 [ 1073.135703] should_fail.cold+0x5/0xa [ 1073.136508] ? create_object.isra.0+0x3a/0xa20 [ 1073.137484] should_failslab+0x5/0x20 [ 1073.138357] kmem_cache_alloc+0x5b/0x360 [ 1073.139231] create_object.isra.0+0x3a/0xa20 [ 1073.140166] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1073.141318] kmem_cache_alloc_node+0x169/0x370 [ 1073.142263] __alloc_skb+0x6d/0x620 [ 1073.143043] netlink_sendmsg+0x98e/0xdf0 [ 1073.143972] ? netlink_unicast+0x7f0/0x7f0 [ 1073.144862] ? netlink_unicast+0x7f0/0x7f0 [ 1073.145764] sock_sendmsg+0x154/0x190 [ 1073.146649] ____sys_sendmsg+0x70d/0x870 [ 1073.147525] ? kernel_sendmsg+0x50/0x50 [ 1073.148350] ? do_recvmmsg+0x6d0/0x6d0 [ 1073.149242] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1073.150335] ? lock_downgrade+0x6d0/0x6d0 [ 1073.151225] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1073.152417] ___sys_sendmsg+0xf3/0x170 [ 1073.153208] ? sendmsg_copy_msghdr+0x160/0x160 [ 1073.154230] ? lock_downgrade+0x6d0/0x6d0 [ 1073.155340] ? find_held_lock+0x2c/0x110 [ 1073.156247] ? __fget_files+0x296/0x480 [ 1073.157231] ? __fget_light+0xea/0x290 [ 1073.158254] __sys_sendmsg+0xe5/0x1b0 [ 1073.159249] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1073.160321] ? rcu_read_lock_any_held+0x75/0xa0 [ 1073.161529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1073.162613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1073.163707] ? trace_hardirqs_on+0x5b/0x180 [ 1073.164621] do_syscall_64+0x33/0x40 [ 1073.165403] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1073.166451] RIP: 0033:0x7effb53e1b19 [ 1073.167233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1073.171067] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.172632] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1073.174115] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1073.175616] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1073.177096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.178582] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1073.184261] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1073.190042] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:36:13 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7", 0x2d, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:36:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d6664ac7266646e6f3dbab5fb8046ba41436d9683344621af43faa4b3826628fe457af964741f89879a61aec5fe1a257622f72c064b7b4ca9c4640b5ca57ef0c652e7e06ccd1821fed172ab0f7021bb61ba8cdc0d7c6c18594827ff066396e7bfe8a09ed294600209d50a", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) clone3(&(0x7f0000000000)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 18:36:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:13 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:13 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1073.247008] 9pnet: Could not find request transport: fd¬rfdno=ºµû€FºACm–ƒ4F!¯Cú¤³‚f(þEzùdt‰‡ša®Åþ%v"÷ 18:36:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x20000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:36:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7", 0x2d, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 1073.318643] FAULT_INJECTION: forcing a failure. [ 1073.318643] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.320204] CPU: 1 PID: 8043 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1073.320886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1073.321714] Call Trace: [ 1073.322008] dump_stack+0x107/0x167 [ 1073.322402] should_fail.cold+0x5/0xa [ 1073.322811] should_failslab+0x5/0x20 [ 1073.323244] __kmalloc_node_track_caller+0x74/0x3f0 [ 1073.323744] ? netlink_sendmsg+0x98e/0xdf0 [ 1073.324198] __alloc_skb+0xb1/0x620 [ 1073.324596] netlink_sendmsg+0x98e/0xdf0 [ 1073.325034] ? netlink_unicast+0x7f0/0x7f0 [ 1073.325493] ? netlink_unicast+0x7f0/0x7f0 [ 1073.325944] sock_sendmsg+0x154/0x190 [ 1073.326328] ____sys_sendmsg+0x70d/0x870 [ 1073.326764] ? kernel_sendmsg+0x50/0x50 [ 1073.327193] ? do_recvmmsg+0x6d0/0x6d0 [ 1073.327613] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1073.328189] ___sys_sendmsg+0xf3/0x170 [ 1073.328606] ? sendmsg_copy_msghdr+0x160/0x160 [ 1073.329105] ? lock_downgrade+0x6d0/0x6d0 [ 1073.329556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1073.330122] ? trace_hardirqs_on+0x5b/0x180 [ 1073.330596] ? irqentry_enter+0x26/0x60 [ 1073.331018] ? __fget_files+0x296/0x480 [ 1073.331459] ? __fget_light+0xea/0x290 [ 1073.331883] __sys_sendmsg+0xe5/0x1b0 [ 1073.332297] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1073.332763] ? io_schedule_timeout+0x140/0x140 [ 1073.333263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1073.333834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1073.334386] ? trace_hardirqs_on+0x5b/0x180 [ 1073.334852] do_syscall_64+0x33/0x40 [ 1073.335275] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1073.335828] RIP: 0033:0x7effb53e1b19 [ 1073.336237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1073.338214] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1073.339038] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1073.339809] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1073.340524] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1073.341281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.342000] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1073.404925] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1074.060304] 9pnet: Could not find request transport: fd¬rfdno=ºµû€FºACm–ƒ4F!¯Cú¤³‚f(þEzùdt‰‡ša®Åþ%v"÷ [ 1085.493482] __nla_validate_parse: 10 callbacks suppressed [ 1085.493490] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:36:26 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="747206008198f10b001800000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 18:36:26 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x16c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:36:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:26 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:26 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f", 0x44, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 1085.503754] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1085.510994] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1085.527185] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1085.535130] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:36:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x80000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1085.540022] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1085.551115] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1085.555538] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1085.568422] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1085.569196] FAULT_INJECTION: forcing a failure. [ 1085.569196] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.569910] EXT4-fs (loop2): get root inode failed [ 1085.572507] CPU: 1 PID: 8083 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1085.572655] EXT4-fs (loop2): mount failed [ 1085.573993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.574001] Call Trace: [ 1085.574028] dump_stack+0x107/0x167 [ 1085.577365] should_fail.cold+0x5/0xa [ 1085.578139] ? create_object.isra.0+0x3a/0xa20 [ 1085.579073] should_failslab+0x5/0x20 [ 1085.579845] kmem_cache_alloc+0x5b/0x360 [ 1085.580671] create_object.isra.0+0x3a/0xa20 [ 1085.581564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1085.582589] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 1085.583624] ? netlink_sendmsg+0x98e/0xdf0 [ 1085.584481] __alloc_skb+0xb1/0x620 [ 1085.585216] netlink_sendmsg+0x98e/0xdf0 [ 1085.586041] ? netlink_unicast+0x7f0/0x7f0 [ 1085.586897] ? netlink_unicast+0x7f0/0x7f0 [ 1085.587773] sock_sendmsg+0x154/0x190 [ 1085.588548] ____sys_sendmsg+0x70d/0x870 [ 1085.589377] ? kernel_sendmsg+0x50/0x50 [ 1085.590173] ? do_recvmmsg+0x6d0/0x6d0 [ 1085.590962] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1085.592035] ? lock_downgrade+0x6d0/0x6d0 [ 1085.592867] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1085.593943] ___sys_sendmsg+0xf3/0x170 [ 1085.594729] ? sendmsg_copy_msghdr+0x160/0x160 [ 1085.595679] ? lock_downgrade+0x6d0/0x6d0 [ 1085.596516] ? find_held_lock+0x2c/0x110 [ 1085.597342] ? __fget_files+0x296/0x480 [ 1085.598153] ? __fget_light+0xea/0x290 [ 1085.598941] __sys_sendmsg+0xe5/0x1b0 [ 1085.599723] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1085.600588] ? rcu_read_lock_any_held+0x75/0xa0 [ 1085.601540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.602598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.603642] ? trace_hardirqs_on+0x5b/0x180 [ 1085.604513] do_syscall_64+0x33/0x40 [ 1085.605263] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1085.606292] RIP: 0033:0x7effb53e1b19 [ 1085.607069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.610755] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.612287] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1085.613725] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1085.615164] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.616600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:36:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) [ 1085.618035] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1085.620247] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1085.646080] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:36:26 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) epoll_create(0x2) 18:36:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:26 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='tfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r2) r3 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r4) r5 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r7 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = socket$inet_icmp(0x2, 0x2, 0x1) io_submit(0x0, 0x6, &(0x7f0000000600)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)="4e2bbf0d6f15f92e17800529f50ad3688c7bbc94accfa18084834d810ab545cfea4c6c029d0df4ab6c61cb908f053c49eaa2ec34b65a0a80426d9599f3b6554e57562478961b340987d6a0a9e529c7f45068076a119bb93ead3b6ae38ed781a3213a6a0e7400dd1d8c0669384d14f0b501b59319f0d44c11bef4b7543ecc79f2028060ba47571e596aca9d5c791cf56e1950d3af84852839ebb67af0e8d56b9e011b97f3b39c3f26f9254ed513b2b7b9464a0c26fd5a3064692d9f595c69f19c32db56136a89", 0xc6, 0x6, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f00000000c0)="826a70a92863df115f6086049cfd67bb0c40008aec54a69f7f21aab38e89cd5a38912ed13b73b4f4b7af5ca02717a0705af7a9f6b2b8ec90a249dd6a2a1a29013f81ed52ce218a2da471", 0x4a, 0x6, 0x0, 0x1, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0x3, r0, &(0x7f0000000380)="9981f7861ecea91bb8bdd21a13267b5a3038c8ff554ea2ce5b44b68fd1809d903009573ace81790eff2a32674a95d5ab1f294469bba209c6cb1e2991eb78fec5273a7c6b49b8116ca387c14492236052b3e3a486d5616d8ff69046179c1aadc63a81e18452fffc8c4270ff2b79cdf5e4e1dac605833f901205c36e23402be0", 0x7f, 0x3f, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2c6317ca17053dfc, 0x3f, r5, &(0x7f0000000400)="38e0554933b72d9562441cde49e2fca76fae5c513493d5bd0eb3f971ad94f3658f3f246f77479e5e0d7fda6b65cd3bf712e738cf676a6b6481d58c015da961abfb5d7403279663a6793139632358947608e01947b8fa8bc80ad0ca310219dca2", 0x60, 0x2, 0x0, 0x2, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x3ff, r6, &(0x7f00000004c0)="934c15732d2ba1ef5d856f0ab6887c8b246eabe2e789267ee57c3caa96aa8b7dcf70ed3956", 0x25, 0x3, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xfffe, r8, &(0x7f0000000540)="a7899092709d34297de826631eeecfa7235a61b0caba87781d3b9b9b348faf09c7cb879262faf6d9341e60cb3f2820c54e37a0b5f08cec1c093aff5a6f09c94ff25e7f5a86b7885a9d19ee6b4c053f27587e022ed88341af8c314cc92613f9b62f11e7888c", 0x65, 0xcc2e, 0x0, 0x1, r0}]) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:26 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:36:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f", 0x44, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:36:26 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1085.821395] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1085.822897] EXT4-fs (loop2): get root inode failed [ 1085.823447] EXT4-fs (loop2): mount failed 18:36:38 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1097.993093] __nla_validate_parse: 15 callbacks suppressed [ 1097.993101] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:36:38 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:36:38 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f", 0x44, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:36:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:38 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1098.001238] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1098.005732] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1098.014584] FAULT_INJECTION: forcing a failure. [ 1098.014584] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.017586] CPU: 1 PID: 8156 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1098.019085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.020985] Call Trace: [ 1098.021572] dump_stack+0x107/0x167 [ 1098.022401] should_fail.cold+0x5/0xa [ 1098.023239] ? __skb_ext_alloc+0x19/0x90 [ 1098.024131] should_failslab+0x5/0x20 [ 1098.024959] kmem_cache_alloc+0x5b/0x360 [ 1098.025859] __skb_ext_alloc+0x19/0x90 [ 1098.026701] skb_ext_add+0x508/0x670 [ 1098.027530] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 1098.028683] __alloc_skb+0x3c1/0x620 [ 1098.029510] netlink_sendmsg+0x98e/0xdf0 [ 1098.030415] ? netlink_unicast+0x7f0/0x7f0 [ 1098.031378] ? netlink_unicast+0x7f0/0x7f0 [ 1098.032314] sock_sendmsg+0x154/0x190 [ 1098.033162] ____sys_sendmsg+0x70d/0x870 [ 1098.034059] ? kernel_sendmsg+0x50/0x50 [ 1098.034927] ? do_recvmmsg+0x6d0/0x6d0 [ 1098.035794] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1098.036953] ? lock_downgrade+0x6d0/0x6d0 [ 1098.037147] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1098.037864] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1098.037892] ___sys_sendmsg+0xf3/0x170 [ 1098.040785] ? sendmsg_copy_msghdr+0x160/0x160 [ 1098.041793] ? lock_downgrade+0x6d0/0x6d0 [ 1098.042705] ? find_held_lock+0x2c/0x110 [ 1098.043613] ? __fget_files+0x296/0x480 [ 1098.044492] ? __fget_light+0xea/0x290 [ 1098.045349] __sys_sendmsg+0xe5/0x1b0 [ 1098.046181] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1098.047133] ? rcu_read_lock_any_held+0x75/0xa0 [ 1098.048188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.049338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.050482] ? trace_hardirqs_on+0x5b/0x180 [ 1098.051450] do_syscall_64+0x33/0x40 [ 1098.052270] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1098.053388] RIP: 0033:0x7effb53e1b19 [ 1098.054208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.058235] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.059925] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1098.061489] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1098.063051] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.064634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.066201] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1098.068308] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. 18:36:38 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1098.084128] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1098.092315] EXT4-fs error (device loop2): ext4_fill_super:4973: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1098.094157] EXT4-fs (loop2): get root inode failed [ 1098.094796] EXT4-fs (loop2): mount failed [ 1098.101121] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:36:38 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1098.137462] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 18:36:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1098.174473] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1098.181240] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1098.212424] FAULT_INJECTION: forcing a failure. [ 1098.212424] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.215267] CPU: 1 PID: 8185 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1098.216691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.218404] Call Trace: [ 1098.218955] dump_stack+0x107/0x167 [ 1098.219712] should_fail.cold+0x5/0xa [ 1098.220504] ? create_object.isra.0+0x3a/0xa20 [ 1098.221440] should_failslab+0x5/0x20 [ 1098.222229] kmem_cache_alloc+0x5b/0x360 [ 1098.223070] create_object.isra.0+0x3a/0xa20 [ 1098.223993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1098.225034] kmem_cache_alloc+0x159/0x360 [ 1098.225891] __skb_ext_alloc+0x19/0x90 [ 1098.226693] skb_ext_add+0x508/0x670 [ 1098.227473] ? __kmalloc_node_track_caller+0x306/0x3f0 [ 1098.228548] __alloc_skb+0x3c1/0x620 [ 1098.229319] netlink_sendmsg+0x98e/0xdf0 [ 1098.230161] ? netlink_unicast+0x7f0/0x7f0 [ 1098.231039] ? netlink_unicast+0x7f0/0x7f0 [ 1098.231926] sock_sendmsg+0x154/0x190 [ 1098.232714] ____sys_sendmsg+0x70d/0x870 [ 1098.233564] ? kernel_sendmsg+0x50/0x50 [ 1098.234374] ? do_recvmmsg+0x6d0/0x6d0 [ 1098.235174] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1098.236257] ? lock_downgrade+0x6d0/0x6d0 [ 1098.237098] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1098.238170] ___sys_sendmsg+0xf3/0x170 [ 1098.238966] ? sendmsg_copy_msghdr+0x160/0x160 [ 1098.239929] ? lock_downgrade+0x6d0/0x6d0 [ 1098.240783] ? find_held_lock+0x2c/0x110 [ 1098.241621] ? __fget_files+0x296/0x480 [ 1098.242446] ? __fget_light+0xea/0x290 [ 1098.243259] __sys_sendmsg+0xe5/0x1b0 [ 1098.244034] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1098.244912] ? rcu_read_lock_any_held+0x75/0xa0 [ 1098.245881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.246951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.248014] ? trace_hardirqs_on+0x5b/0x180 [ 1098.248900] do_syscall_64+0x33/0x40 [ 1098.249664] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1098.250708] RIP: 0033:0x7effb53e1b19 [ 1098.251492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.255265] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.256839] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1098.258311] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1098.259803] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.261276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.262751] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 18:36:49 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:36:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:36:49 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:36:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:36:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:36:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:36:49 executing program 4: clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) r1 = epoll_create1(0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r3) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x100000001) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7489616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',context=sysadm_u,fowner<', @ANYRESDEC=r2, @ANYBLOB=',fscontext=root,fsname=,context=root,\x00']) 18:36:49 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1108.613520] __nla_validate_parse: 1 callbacks suppressed [ 1108.613532] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1108.651125] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1108.654948] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1108.658559] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1108.660001] EXT4-fs (loop2): invalid first ino: 0 [ 1108.667365] FAULT_INJECTION: forcing a failure. [ 1108.667365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.669072] CPU: 0 PID: 8205 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1108.670004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1108.671111] Call Trace: [ 1108.671490] dump_stack+0x107/0x167 [ 1108.671982] should_fail.cold+0x5/0xa [ 1108.672496] _copy_from_iter_full+0x1ff/0x940 [ 1108.673105] ? __check_object_size+0x319/0x440 [ 1108.673728] netlink_sendmsg+0x86f/0xdf0 [ 1108.674277] ? netlink_unicast+0x7f0/0x7f0 [ 1108.674853] ? netlink_unicast+0x7f0/0x7f0 [ 1108.675464] sock_sendmsg+0x154/0x190 [ 1108.675973] ____sys_sendmsg+0x70d/0x870 [ 1108.676536] ? kernel_sendmsg+0x50/0x50 [ 1108.677094] ? do_recvmmsg+0x6d0/0x6d0 [ 1108.677639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1108.678379] ? lock_downgrade+0x6d0/0x6d0 [ 1108.678971] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1108.679724] ___sys_sendmsg+0xf3/0x170 [ 1108.680298] ? sendmsg_copy_msghdr+0x160/0x160 [ 1108.680946] ? lock_downgrade+0x6d0/0x6d0 [ 1108.681549] ? find_held_lock+0x2c/0x110 [ 1108.682118] ? __fget_files+0x296/0x480 [ 1108.682707] ? __fget_light+0xea/0x290 [ 1108.683252] __sys_sendmsg+0xe5/0x1b0 [ 1108.683816] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1108.684401] ? rcu_read_lock_any_held+0x75/0xa0 [ 1108.685070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1108.685771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1108.686503] ? trace_hardirqs_on+0x5b/0x180 [ 1108.687088] do_syscall_64+0x33/0x40 [ 1108.687623] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1108.688325] RIP: 0033:0x7effb53e1b19 [ 1108.688852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1108.691304] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.692445] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1108.693499] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1108.694554] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1108.695621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.696636] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1108.703054] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1108.704533] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1108.706339] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1108.762040] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 18:37:01 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1120.864115] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1120.865239] FAULT_INJECTION: forcing a failure. [ 1120.865239] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.866914] CPU: 1 PID: 8231 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1120.867673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.868563] Call Trace: [ 1120.868856] dump_stack+0x107/0x167 [ 1120.869271] should_fail.cold+0x5/0xa [ 1120.869698] ? __alloc_skb+0x6d/0x620 [ 1120.870006] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1120.870127] should_failslab+0x5/0x20 [ 1120.872397] kmem_cache_alloc_node+0x55/0x370 [ 1120.872891] __alloc_skb+0x6d/0x620 [ 1120.873286] netlink_dump+0x735/0x1050 [ 1120.873713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.874287] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1120.874863] ? trace_hardirqs_on+0x5b/0x180 [ 1120.875344] ? netlink_insert+0x1640/0x1640 [ 1120.875834] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1120.876446] __netlink_dump_start+0x649/0x900 [ 1120.876952] ctnetlink_get_expect+0x662/0x740 [ 1120.877456] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1120.878099] ? mutex_lock_io_nested+0x1110/0x1110 [ 1120.878642] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 1120.879328] ? ctnetlink_get_ct_dying+0x160/0x160 [ 1120.879885] ? nfnetlink_rcv_msg+0x875/0xf40 [ 1120.880380] ? lock_downgrade+0x6d0/0x6d0 [ 1120.880848] ? __nla_parse+0x3e/0x50 [ 1120.881269] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1120.881913] nfnetlink_rcv_msg+0xc40/0xf40 [ 1120.882395] ? nfnetlink_bind+0x2d0/0x2d0 [ 1120.882871] ? avc_has_extended_perms+0xec0/0xec0 [ 1120.883411] ? __lock_acquire+0xbb1/0x5b00 [ 1120.883905] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1120.884479] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1120.885055] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1120.885599] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1120.886149] netlink_rcv_skb+0x14b/0x430 [ 1120.886606] ? nfnetlink_bind+0x2d0/0x2d0 [ 1120.887068] ? netlink_ack+0xab0/0xab0 [ 1120.887517] ? ns_capable+0xdd/0x100 [ 1120.887933] nfnetlink_rcv+0x1ac/0x420 [ 1120.888367] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 1120.888901] ? netlink_deliver_tap+0x1c4/0xc40 [ 1120.889410] ? is_vmalloc_addr+0x7b/0xb0 [ 1120.889867] netlink_unicast+0x549/0x7f0 [ 1120.890328] ? netlink_attachskb+0x810/0x810 [ 1120.890825] netlink_sendmsg+0x905/0xdf0 [ 1120.891284] ? netlink_unicast+0x7f0/0x7f0 [ 1120.891803] ? netlink_unicast+0x7f0/0x7f0 [ 1120.892276] sock_sendmsg+0x154/0x190 [ 1120.892708] ____sys_sendmsg+0x70d/0x870 [ 1120.893165] ? kernel_sendmsg+0x50/0x50 [ 1120.893606] ? do_recvmmsg+0x6d0/0x6d0 [ 1120.894039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1120.894628] ? lock_downgrade+0x6d0/0x6d0 [ 1120.895074] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1120.895679] ___sys_sendmsg+0xf3/0x170 [ 1120.896115] ? sendmsg_copy_msghdr+0x160/0x160 [ 1120.896629] ? lock_downgrade+0x6d0/0x6d0 [ 1120.897090] ? find_held_lock+0x2c/0x110 [ 1120.897549] ? __fget_files+0x296/0x480 [ 1120.897997] ? __fget_light+0xea/0x290 [ 1120.898440] __sys_sendmsg+0xe5/0x1b0 [ 1120.898861] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1120.899339] ? rcu_read_lock_any_held+0x75/0xa0 [ 1120.899858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.900450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1120.901026] ? trace_hardirqs_on+0x5b/0x180 [ 1120.901509] do_syscall_64+0x33/0x40 [ 1120.901921] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1120.902493] RIP: 0033:0x7effb53e1b19 [ 1120.902506] EXT4-fs (loop2): invalid first ino: 0 [ 1120.903442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.905424] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.906275] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1120.907073] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1120.907874] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.908674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.909465] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 [ 1120.918341] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1120.920428] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1120.924770] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1120.926327] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 18:37:01 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:37:01 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:37:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:37:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:37:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) 18:37:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:37:01 executing program 4: clone3(&(0x7f0000001200)={0x8811cf00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r1) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x5}) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x34, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x3}], 0xcb, 0x0, &(0x7f00000001c0)="b4b87d162afc8093a58631caab0fe6cd9f6a9ca3da083544f0cb975f7bf165a2fe76fdf8830e86192cce300c64844fb1da3790a09cbace6ee79c4461d708e6eac29ee08183519a843a712dedcf18884a865ccaa6a0cba4fea70e18fa49d139107a91cb67f7e59c4a0a81e5ab8e09805657627844934eb32f451f80b72511200020ffeaa9c076e4e5ec7b9e899e4d5c478f79f24d334a2ad7ac3eb8a135a138abf265c15e60d26c834f0ab4b0aee122a7fa96152fcc0540ad3d7f0378484666061a93fc61977e27b1ea42cf"}) [ 1120.931538] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1120.941011] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1120.947040] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:37:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x62010000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:37:01 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x17d, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1120.982262] 9pnet: Insufficient options for proto=fd 18:37:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 1121.003892] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:37:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:37:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xec0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:37:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:37:01 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) 18:37:01 executing program 6: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) (fail_nth: 11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1121.106342] EXT4-fs (loop2): invalid first ino: 0 18:37:01 executing program 7: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 18:37:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xc00e0000, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) 18:37:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf00, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r3, 0x0, 0x806, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 18:37:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000780)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) close(r0) [ 1121.174197] FAULT_INJECTION: forcing a failure. [ 1121.174197] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.176974] CPU: 0 PID: 8273 Comm: syz-executor.6 Not tainted 5.10.161 #1 [ 1121.178509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1121.180384] Call Trace: [ 1121.180983] dump_stack+0x107/0x167 [ 1121.181808] should_fail.cold+0x5/0xa [ 1121.182667] ? create_object.isra.0+0x3a/0xa20 [ 1121.183704] should_failslab+0x5/0x20 [ 1121.184566] kmem_cache_alloc+0x5b/0x360 [ 1121.185474] ? lock_release+0x6b0/0x6b0 [ 1121.186359] create_object.isra.0+0x3a/0xa20 [ 1121.187350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1121.188473] kmem_cache_alloc_node+0x169/0x370 [ 1121.189497] __alloc_skb+0x6d/0x620 [ 1121.190297] netlink_dump+0x735/0x1050 [ 1121.191151] ? netlink_insert+0x1640/0x1640 [ 1121.192092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1121.193172] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1121.194271] ? trace_hardirqs_on+0x5b/0x180 [ 1121.195241] __netlink_dump_start+0x649/0x900 [ 1121.196240] ctnetlink_get_expect+0x662/0x740 [ 1121.197215] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1121.198455] ? mutex_lock_io_nested+0x1110/0x1110 [ 1121.199518] ? ctnetlink_exp_fill_info.constprop.0+0x1300/0x1300 [ 1121.200836] ? ctnetlink_get_ct_dying+0x160/0x160 [ 1121.201885] ? nfnetlink_rcv_msg+0x875/0xf40 [ 1121.202836] ? lock_downgrade+0x6d0/0x6d0 [ 1121.203756] ? __nla_parse+0x3e/0x50 [ 1121.204567] ? ctnetlink_dump_exp_ct.constprop.0+0x3d0/0x3d0 [ 1121.205810] nfnetlink_rcv_msg+0xc40/0xf40 [ 1121.206743] ? nfnetlink_bind+0x2d0/0x2d0 [ 1121.207660] ? avc_has_extended_perms+0xec0/0xec0 [ 1121.208703] ? __lock_acquire+0xbb1/0x5b00 [ 1121.209634] ? cred_has_capability.isra.0+0x143/0x2b0 [ 1121.210743] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1121.211881] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1121.212941] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 1121.214008] netlink_rcv_skb+0x14b/0x430 [ 1121.214888] ? nfnetlink_bind+0x2d0/0x2d0 [ 1121.215797] ? netlink_ack+0xab0/0xab0 [ 1121.216651] ? ns_capable+0xdd/0x100 [ 1121.217465] nfnetlink_rcv+0x1ac/0x420 [ 1121.218309] ? nfnetlink_rcv_batch+0x1bf0/0x1bf0 [ 1121.219331] ? netlink_deliver_tap+0x1c4/0xc40 [ 1121.220325] ? is_vmalloc_addr+0x7b/0xb0 [ 1121.221211] netlink_unicast+0x549/0x7f0 [ 1121.222097] ? netlink_attachskb+0x810/0x810 [ 1121.223062] netlink_sendmsg+0x905/0xdf0 [ 1121.223964] ? netlink_unicast+0x7f0/0x7f0 [ 1121.224893] ? netlink_unicast+0x7f0/0x7f0 [ 1121.225809] sock_sendmsg+0x154/0x190 [ 1121.226636] ____sys_sendmsg+0x70d/0x870 [ 1121.227533] ? kernel_sendmsg+0x50/0x50 [ 1121.228389] ? do_recvmmsg+0x6d0/0x6d0 [ 1121.229232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1121.230367] ? lock_downgrade+0x6d0/0x6d0 [ 1121.231268] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1121.232420] ___sys_sendmsg+0xf3/0x170 [ 1121.233263] ? sendmsg_copy_msghdr+0x160/0x160 [ 1121.234259] ? lock_downgrade+0x6d0/0x6d0 [ 1121.235158] ? find_held_lock+0x2c/0x110 [ 1121.236051] ? __fget_files+0x296/0x480 [ 1121.236922] ? __fget_light+0xea/0x290 [ 1121.237772] __sys_sendmsg+0xe5/0x1b0 [ 1121.238626] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1121.239588] ? rcu_read_lock_any_held+0x75/0xa0 [ 1121.240658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1121.241784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1121.242944] ? trace_hardirqs_on+0x5b/0x180 [ 1121.243890] do_syscall_64+0x33/0x40 [ 1121.244719] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1121.245830] RIP: 0033:0x7effb53e1b19 [ 1121.246675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1121.250649] RSP: 002b:00007effb2957188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.252381] RAX: ffffffffffffffda RBX: 00007effb54f4f60 RCX: 00007effb53e1b19 [ 1121.253918] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 1121.255453] RBP: 00007effb29571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.257002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.258541] R13: 00007ffcb6ee60bf R14: 00007effb2957300 R15: 0000000000022000 18:37:01 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000003) dup2(0xffffffffffffffff, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) 18:37:01 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c0001801402000000000000050000000000000000000000140004000000000000000000"], 0x50}}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x0, 0x806, 0x0) ftruncate(r3, 0x1000003) dup2(r3, r4) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='+,}*\')/$:)$I,+\x00', &(0x7f00000000c0)='./file0\x00', r3) [ 1121.334491] EXT4-fs (loop2): unsupported inode size: 0 [ 1121.335157] EXT4-fs (loop2): blocksize: 1024 18:37:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = dup(r1) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000010201a60b000000000000000a000000487e01802c00018014020000000000000500000000000000000000001400040000000000000000"], 0x50}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r3, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x5}]}, 0x14, 0x0) [ 1121.790762] 9pnet: Insufficient options for proto=fd [ 1402.255488] kworker/dying (7378) used greatest stack depth: 23616 bytes left VM DIAGNOSIS: 18:42:07 Registers: info registers vcpu 0 RAX=ffffffff83e219f0 RBX=ffffffff84e322c0 RCX=ffffffff83e0973c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e21db3 RBP=fffffbfff09c6458 RSP=ffffffff84e07e40 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85670b08 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e219fe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f32c55efff8 CR3=000000000eb2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004134c7f800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e219f0 RBX=ffff88800852b300 RCX=ffffffff83e0973c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e21db3 RBP=ffffed10010a5660 RSP=ffff88800856fe78 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85670b08 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e219fe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f32c6ad6010 CR3=000000000eb2e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00c401fe016c6c6f502e726567616e61 XMM02=e4fde9bd342be81a482bfcaee7384141 XMM03=a41cfbfb2b78251c478c171fa6da401c XMM04=000000c000397038000000c000397000 XMM05=000000c000397ab8000000c000397a80 XMM06=000000c000397b28000000c000397af0 XMM07=000000c000397b98000000c000397b60 XMM08=000000c000397c08000000c000397bd0 XMM09=000000c000397c78000000c000397c40 XMM10=000000c000397ce8000000c000397cb0 XMM11=000000c000397d58000000c000397d20 XMM12=000000c000397dc8000000c000397d90 XMM13=000000c0003975e8000000c0003975b0 XMM14=000000c000397658000000c000397620 XMM15=000000c0003976c8000000c000397690