24.515855][T10978] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2524.520802][T10978] ? copy_clone_args_from_user+0x744/0x830 [ 2524.526442][T10978] kernel_clone+0x21e/0x9e0 [ 2524.530780][T10978] ? __delayed_free_task+0x20/0x20 [ 2524.535728][T10978] ? create_io_thread+0x1e0/0x1e0 [ 2524.540611][T10978] ? kernel_write+0x3d0/0x3d0 [ 2524.545105][T10978] __x64_sys_clone3+0x376/0x3a0 [ 2524.549788][T10978] ? __ia32_sys_clone+0x290/0x290 [ 2524.554648][T10978] ? ksys_write+0x260/0x2c0 [ 2524.559077][T10978] ? __kasan_check_write+0x14/0x20 [ 2524.564026][T10978] ? debug_smp_processor_id+0x17/0x20 [ 2524.569230][T10978] do_syscall_64+0x34/0x70 [ 2524.573484][T10978] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2524.579213][T10978] RIP: 0033:0x7fe73cec4ba9 [ 2524.583476][T10978] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2524.602904][T10978] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2524.611150][T10978] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2524.618959][T10978] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2524.626777][T10978] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2524.634589][T10978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2524.642391][T10978] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:29:45 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:29:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r2 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x200, 0x7fffffff, 0xf79c, 0x0, 0x1, 0xfffffe4c, '\x00', r1, r3, 0x1, 0x4, 0x1, 0xf}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000004c0)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3460, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b45acfef7b1cac6669c53f1c4a4978b57a74cb9e861df0079e6e8154369843183bee44ebb27571ffb5116f90", 0x2c}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xe78}}], 0x90}, 0x804) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async) open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0x1000000201005) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x200, 0x7fffffff, 0xf79c, 0x0, 0x1, 0xfffffe4c, '\x00', r1, r3, 0x1, 0x4, 0x1, 0xf}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000004c0)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3460, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="b45acfef7b1cac6669c53f1c4a4978b57a74cb9e861df0079e6e8154369843183bee44ebb27571ffb5116f90", 0x2c}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xe78}}], 0x90}, 0x804) (async) dup(r5) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) 17:29:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x2}}) 17:29:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 17:29:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) open(&(0x7f0000000040)='./file0\x00', 0x181003, 0x34) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="e9"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:29:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x3}}) 17:29:46 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3, 0x0, 0x0, 0x20000010}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:46 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x40000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x4}}) [ 2525.282027][T11017] FAULT_INJECTION: forcing a failure. [ 2525.282027][T11017] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.294483][T11017] CPU: 1 PID: 11017 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2525.304587][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2525.314480][T11017] Call Trace: [ 2525.317615][T11017] dump_stack_lvl+0x1e2/0x24b [ 2525.322123][T11017] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2525.327417][T11017] ? __kasan_check_read+0x11/0x20 [ 2525.332278][T11017] ? preempt_schedule_irq+0xe7/0x140 [ 2525.337399][T11017] dump_stack+0x15/0x17 [ 2525.341400][T11017] should_fail+0x3c6/0x510 [ 2525.345645][T11017] ? security_prepare_creds+0x4d/0x140 [ 2525.350940][T11017] __should_failslab+0xa4/0xe0 [ 2525.355537][T11017] should_failslab+0x9/0x20 [ 2525.359878][T11017] __kmalloc+0x60/0x330 [ 2525.363870][T11017] security_prepare_creds+0x4d/0x140 [ 2525.368990][T11017] prepare_creds+0x3f8/0x5f0 [ 2525.373417][T11017] copy_creds+0xe7/0x480 [ 2525.377496][T11017] copy_process+0x93f/0x3340 [ 2525.381921][T11017] ? __switch_to+0x5f6/0x1240 [ 2525.386436][T11017] ? check_stack_object+0xf4/0x130 [ 2525.391383][T11017] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2525.396327][T11017] ? copy_clone_args_from_user+0x744/0x830 [ 2525.401972][T11017] kernel_clone+0x21e/0x9e0 [ 2525.406312][T11017] ? __delayed_free_task+0x20/0x20 [ 2525.411256][T11017] ? create_io_thread+0x1e0/0x1e0 [ 2525.416119][T11017] __x64_sys_clone3+0x376/0x3a0 [ 2525.420804][T11017] ? __ia32_sys_clone+0x290/0x290 [ 2525.425675][T11017] do_syscall_64+0x34/0x70 [ 2525.429920][T11017] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2525.435646][T11017] RIP: 0033:0x7fe73cec4ba9 [ 2525.439899][T11017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2525.459342][T11017] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2525.467582][T11017] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2525.475393][T11017] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2525.483223][T11017] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2525.491014][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2525.498827][T11017] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:29:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) open(&(0x7f0000000040)='./file0\x00', 0x181003, 0x34) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="e9"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:29:46 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x5}}) 17:29:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x6}}) 17:29:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) open(&(0x7f0000000040)='./file0\x00', 0x181003, 0x34) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="e9"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:29:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 17:29:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x7}}) 17:29:47 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x8}}) 17:29:47 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x80000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3, 0x0, 0x0, 0x20000010}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2526.141138][T11048] FAULT_INJECTION: forcing a failure. [ 2526.141138][T11048] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.153593][T11048] CPU: 0 PID: 11048 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2526.163694][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2526.173598][T11048] Call Trace: [ 2526.176729][T11048] dump_stack_lvl+0x1e2/0x24b [ 2526.181229][T11048] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2526.186525][T11048] ? _raw_spin_lock+0xa4/0x1b0 [ 2526.191125][T11048] dump_stack+0x15/0x17 [ 2526.195113][T11048] should_fail+0x3c6/0x510 [ 2526.199367][T11048] ? create_user_ns+0x560/0x1810 [ 2526.204141][T11048] __should_failslab+0xa4/0xe0 [ 2526.208741][T11048] should_failslab+0x9/0x20 [ 2526.213080][T11048] kmem_cache_alloc+0x3d/0x2e0 [ 2526.217712][T11048] create_user_ns+0x560/0x1810 [ 2526.222278][T11048] ? utsns_owner+0x40/0x40 [ 2526.226535][T11048] ? security_prepare_creds+0x102/0x140 [ 2526.231916][T11048] ? prepare_creds+0x40c/0x5f0 [ 2526.236514][T11048] copy_creds+0x217/0x480 [ 2526.240681][T11048] copy_process+0x93f/0x3340 [ 2526.245107][T11048] ? memset+0x35/0x40 [ 2526.248929][T11048] ? __fsnotify_parent+0x4b9/0x6c0 [ 2526.253873][T11048] ? check_stack_object+0xf4/0x130 [ 2526.258820][T11048] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2526.263765][T11048] ? copy_clone_args_from_user+0x744/0x830 [ 2526.269415][T11048] kernel_clone+0x21e/0x9e0 [ 2526.273750][T11048] ? __delayed_free_task+0x20/0x20 [ 2526.278695][T11048] ? create_io_thread+0x1e0/0x1e0 [ 2526.283560][T11048] ? kernel_write+0x3d0/0x3d0 [ 2526.288070][T11048] __x64_sys_clone3+0x376/0x3a0 [ 2526.292753][T11048] ? __ia32_sys_clone+0x290/0x290 [ 2526.297618][T11048] ? ksys_write+0x260/0x2c0 [ 2526.301957][T11048] ? debug_smp_processor_id+0x17/0x20 [ 2526.307168][T11048] do_syscall_64+0x34/0x70 [ 2526.311417][T11048] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2526.317142][T11048] RIP: 0033:0x7fe73cec4ba9 [ 2526.321398][T11048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2526.340838][T11048] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2526.349082][T11048] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2526.356892][T11048] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2526.364704][T11048] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2526.372513][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2526.380326][T11048] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:29:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x9}}) 17:29:47 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:29:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xa}}) 17:29:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xb}}) 17:29:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xc}}) 17:30:41 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0xfffffff7}}, {0x0, 0x14}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:41 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xd}}) 17:30:41 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) 17:30:41 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xec000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="d60e135a2c19c17ca2b688e9623b35680ad966de46d2294fcc0ca523aab8e691e8fbc0be0af8fa6d2ab686d17c4fe318138c93ea4aa8199297f10ae26c4cb480107f3ed51a347d41b28a0371fe1e6572a201fdbc9432a389c33a6a3aad192717e7e6eacb8faef8d0ed6116ae49fa88dee903a0f389dae1b4fa3d3a39fafcee5739f2131a736bc093fc90be1263070bc73a48fdbb8d74786d0e0e44e598b78356b1a7dc812ca06585277386ac7d949f84b6d91caea81456ee2798250f934873e2bdd45d083383be3de031fb9fb7279ece5366a2cbd873c3cd8a9fecf401f8b8a0332d9ea02efb178648ca52c3b3b127dd7e0014faf1070332ca6866", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xe}}) [ 2581.005703][T11133] FAULT_INJECTION: forcing a failure. [ 2581.005703][T11133] name failslab, interval 1, probability 0, space 0, times 0 [ 2581.018202][T11133] CPU: 1 PID: 11133 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2581.028273][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2581.038164][T11133] Call Trace: [ 2581.041303][T11133] dump_stack_lvl+0x1e2/0x24b [ 2581.045807][T11133] ? panic+0x80b/0x80b [ 2581.049716][T11133] ? xas_nomem+0x19a/0x1d0 [ 2581.053965][T11133] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2581.059280][T11133] ? irqentry_exit+0x4f/0x60 [ 2581.063723][T11133] ? sysvec_reschedule_ipi+0x83/0x160 [ 2581.068902][T11133] dump_stack+0x15/0x17 [ 2581.072895][T11133] should_fail+0x3c6/0x510 [ 2581.077143][T11133] ? setup_userns_sysctls+0x55/0x290 [ 2581.082263][T11133] __should_failslab+0xa4/0xe0 [ 2581.086859][T11133] should_failslab+0x9/0x20 [ 2581.091204][T11133] __kmalloc_track_caller+0x5f/0x320 [ 2581.096326][T11133] kmemdup+0x24/0x50 [ 2581.100053][T11133] setup_userns_sysctls+0x55/0x290 [ 2581.104998][T11133] create_user_ns+0xd67/0x1810 [ 2581.109599][T11133] ? utsns_owner+0x40/0x40 [ 2581.113853][T11133] ? security_prepare_creds+0x102/0x140 [ 2581.119234][T11133] ? prepare_creds+0x40c/0x5f0 [ 2581.123841][T11133] copy_creds+0x217/0x480 [ 2581.128003][T11133] copy_process+0x93f/0x3340 [ 2581.132427][T11133] ? irqentry_exit+0x4f/0x60 [ 2581.136850][T11133] ? sysvec_reschedule_ipi+0x83/0x160 [ 2581.142065][T11133] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2581.147529][T11133] ? check_stack_object+0xf4/0x130 [ 2581.152474][T11133] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2581.157420][T11133] ? copy_clone_args_from_user+0x744/0x830 [ 2581.163062][T11133] kernel_clone+0x21e/0x9e0 [ 2581.167400][T11133] ? __delayed_free_task+0x20/0x20 [ 2581.172349][T11133] ? create_io_thread+0x1e0/0x1e0 [ 2581.177210][T11133] ? __this_cpu_preempt_check+0x13/0x20 [ 2581.182596][T11133] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2581.189100][T11133] __x64_sys_clone3+0x376/0x3a0 [ 2581.193813][T11133] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2581.198826][T11133] ? __ia32_sys_clone+0x290/0x290 [ 2581.203697][T11133] ? __kasan_check_read+0x11/0x20 [ 2581.208542][T11133] do_syscall_64+0x34/0x70 [ 2581.212802][T11133] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2581.218524][T11133] RIP: 0033:0x7fe73cec4ba9 [ 2581.222792][T11133] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2581.242217][T11133] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2581.250464][T11133] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2581.258270][T11133] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2581.266081][T11133] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2581.273894][T11133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2581.281708][T11133] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x10}}) 17:30:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x11}}) 17:30:42 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x12}}) 17:30:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) [ 2581.849775][T11151] FAULT_INJECTION: forcing a failure. [ 2581.849775][T11151] name failslab, interval 1, probability 0, space 0, times 0 [ 2581.862242][T11151] CPU: 1 PID: 11151 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2581.872437][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2581.882327][T11151] Call Trace: [ 2581.885463][T11151] dump_stack_lvl+0x1e2/0x24b [ 2581.889968][T11151] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2581.895261][T11151] ? irqentry_exit+0x4f/0x60 [ 2581.899697][T11151] dump_stack+0x15/0x17 [ 2581.903680][T11151] should_fail+0x3c6/0x510 [ 2581.907932][T11151] ? vm_area_dup+0x26/0x270 [ 2581.912272][T11151] __should_failslab+0xa4/0xe0 [ 2581.916869][T11151] should_failslab+0x9/0x20 [ 2581.921213][T11151] kmem_cache_alloc+0x3d/0x2e0 [ 2581.925814][T11151] ? __kasan_check_read+0x11/0x20 [ 2581.930674][T11151] vm_area_dup+0x26/0x270 [ 2581.934837][T11151] copy_mm+0x8ac/0x13a0 [ 2581.938834][T11151] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2581.944295][T11151] ? copy_signal+0x610/0x610 [ 2581.948724][T11151] ? __init_rwsem+0xd6/0x1c0 [ 2581.953149][T11151] ? copy_signal+0x4e3/0x610 [ 2581.957573][T11151] copy_process+0x1175/0x3340 [ 2581.962090][T11151] ? memset+0x35/0x40 [ 2581.965907][T11151] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2581.970859][T11151] ? copy_clone_args_from_user+0x744/0x830 [ 2581.976503][T11151] kernel_clone+0x21e/0x9e0 [ 2581.980837][T11151] ? __delayed_free_task+0x20/0x20 [ 2581.985787][T11151] ? create_io_thread+0x1e0/0x1e0 [ 2581.990644][T11151] __x64_sys_clone3+0x376/0x3a0 [ 2581.995332][T11151] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2582.000363][T11151] ? __ia32_sys_clone+0x290/0x290 [ 2582.005233][T11151] ? __kasan_check_read+0x11/0x20 [ 2582.010089][T11151] do_syscall_64+0x34/0x70 [ 2582.014339][T11151] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2582.020064][T11151] RIP: 0033:0x7fe73cec4ba9 [ 2582.024319][T11151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2582.043765][T11151] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2582.052010][T11151] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2582.059907][T11151] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2582.067717][T11151] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2582.075527][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2582.083458][T11151] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 [ 2584.114727][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2584.121646][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 2584.131281][T11155] device bridge_slave_0 entered promiscuous mode [ 2584.138149][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 2584.145112][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.152424][T11155] device bridge_slave_1 entered promiscuous mode [ 2584.199193][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 2584.206053][T11155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2584.213204][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2584.219969][T11155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2584.242722][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 2584.250145][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.257383][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2584.264988][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2584.289056][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2584.297188][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2584.305511][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 2584.312391][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2584.319689][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2584.327696][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2584.334579][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2584.341730][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2584.349585][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2584.361664][T11155] device veth0_vlan entered promiscuous mode [ 2584.369597][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2584.377400][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2584.385337][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2584.399462][T11155] device veth1_macvtap entered promiscuous mode [ 2584.409112][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2584.422160][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2584.431200][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 17:30:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r4) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:45 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x100000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x16}}) 17:30:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0xfffffff7}}, {0x0, 0x14}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0xfffffff7}}, {0x0, 0x14}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) 17:30:45 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) 17:30:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x18}}) [ 2584.605415][T11177] FAULT_INJECTION: forcing a failure. [ 2584.605415][T11177] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.618005][T11177] CPU: 1 PID: 11177 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2584.628136][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2584.638011][T11177] Call Trace: [ 2584.641148][T11177] dump_stack_lvl+0x1e2/0x24b [ 2584.645660][T11177] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2584.650955][T11177] ? preempt_schedule_irq+0xe7/0x140 [ 2584.656071][T11177] ? preempt_schedule_notrace+0x140/0x140 [ 2584.661631][T11177] dump_stack+0x15/0x17 [ 2584.665620][T11177] should_fail+0x3c6/0x510 [ 2584.669889][T11177] ? __register_sysctl_table+0x9de/0x1240 [ 2584.675426][T11177] __should_failslab+0xa4/0xe0 [ 2584.680027][T11177] should_failslab+0x9/0x20 [ 2584.684371][T11177] __kmalloc+0x60/0x330 [ 2584.688360][T11177] ? __register_sysctl_table+0x697/0x1240 [ 2584.693912][T11177] __register_sysctl_table+0x9de/0x1240 [ 2584.699300][T11177] setup_userns_sysctls+0x20d/0x290 [ 2584.704326][T11177] create_user_ns+0xd67/0x1810 [ 2584.708927][T11177] ? utsns_owner+0x40/0x40 [ 2584.713182][T11177] ? security_prepare_creds+0x102/0x140 [ 2584.718564][T11177] ? prepare_creds+0x40c/0x5f0 [ 2584.723161][T11177] copy_creds+0x217/0x480 [ 2584.727327][T11177] copy_process+0x93f/0x3340 [ 2584.731755][T11177] ? copy_clone_args_from_user+0x6a7/0x830 [ 2584.737395][T11177] ? kasan_check_range+0x82/0x2a0 [ 2584.742258][T11177] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2584.747236][T11177] ? copy_clone_args_from_user+0x744/0x830 [ 2584.752844][T11177] kernel_clone+0x21e/0x9e0 [ 2584.757182][T11177] ? __delayed_free_task+0x20/0x20 [ 2584.762132][T11177] ? create_io_thread+0x1e0/0x1e0 [ 2584.766990][T11177] __x64_sys_clone3+0x376/0x3a0 [ 2584.771679][T11177] ? __switch_to_asm+0x34/0x60 [ 2584.776275][T11177] ? __ia32_sys_clone+0x290/0x290 [ 2584.781141][T11177] ? __schedule+0xbee/0x1330 [ 2584.785568][T11177] ? __kasan_check_write+0x14/0x20 [ 2584.790513][T11177] ? __kasan_check_read+0x11/0x20 [ 2584.795372][T11177] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 2584.800753][T11177] ? irqentry_exit_to_user_mode+0x4d/0x80 [ 2584.806307][T11177] do_syscall_64+0x34/0x70 [ 2584.810561][T11177] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2584.816286][T11177] RIP: 0033:0x7fe73cec4ba9 [ 2584.820542][T11177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2584.839991][T11177] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2584.848225][T11177] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2584.856035][T11177] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2584.863853][T11177] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2584.871659][T11177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2584.879483][T11177] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 [ 2584.887438][T11177] sysctl could not get directory: //user -12 [ 2584.893342][T11177] CPU: 1 PID: 11177 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2584.903393][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2584.913284][T11177] Call Trace: [ 2584.916417][T11177] dump_stack_lvl+0x1e2/0x24b [ 2584.920929][T11177] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2584.926221][T11177] dump_stack+0x15/0x17 [ 2584.930215][T11177] __register_sysctl_table+0x11a9/0x1240 [ 2584.935684][T11177] setup_userns_sysctls+0x20d/0x290 [ 2584.940716][T11177] create_user_ns+0xd67/0x1810 [ 2584.945313][T11177] ? utsns_owner+0x40/0x40 [ 2584.949570][T11177] ? security_prepare_creds+0x102/0x140 [ 2584.954955][T11177] ? prepare_creds+0x40c/0x5f0 [ 2584.959549][T11177] copy_creds+0x217/0x480 [ 2584.963734][T11177] copy_process+0x93f/0x3340 [ 2584.968147][T11177] ? copy_clone_args_from_user+0x6a7/0x830 [ 2584.973786][T11177] ? kasan_check_range+0x82/0x2a0 [ 2584.978648][T11177] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2584.983597][T11177] ? copy_clone_args_from_user+0x744/0x830 [ 2584.989234][T11177] kernel_clone+0x21e/0x9e0 [ 2584.993571][T11177] ? __delayed_free_task+0x20/0x20 [ 2584.998518][T11177] ? create_io_thread+0x1e0/0x1e0 [ 2585.003386][T11177] __x64_sys_clone3+0x376/0x3a0 [ 2585.008069][T11177] ? __switch_to_asm+0x34/0x60 [ 2585.012798][T11177] ? __ia32_sys_clone+0x290/0x290 [ 2585.017646][T11177] ? __schedule+0xbee/0x1330 [ 2585.022076][T11177] ? __kasan_check_write+0x14/0x20 [ 2585.027023][T11177] ? __kasan_check_read+0x11/0x20 [ 2585.031881][T11177] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 2585.037261][T11177] ? irqentry_exit_to_user_mode+0x4d/0x80 [ 2585.042813][T11177] do_syscall_64+0x34/0x70 [ 2585.047067][T11177] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2585.052965][T11177] RIP: 0033:0x7fe73cec4ba9 [ 2585.057218][T11177] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2585.076658][T11177] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2585.084914][T11177] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2585.092903][T11177] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2585.100720][T11177] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2585.108524][T11177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.116335][T11177] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 17:30:46 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x101000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) getgroups(0x1, &(0x7f0000000040)=[0xffffffffffffffff]) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0xfffffff7}}, {0x0, 0x14}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:46 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:46 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x1a}}) [ 2585.461415][T11202] FAULT_INJECTION: forcing a failure. [ 2585.461415][T11202] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.473912][T11202] CPU: 0 PID: 11202 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2585.483984][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2585.493881][T11202] Call Trace: [ 2585.497004][T11202] dump_stack_lvl+0x1e2/0x24b [ 2585.501511][T11202] ? panic+0x80b/0x80b [ 2585.505415][T11202] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2585.510713][T11202] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2585.516958][T11202] dump_stack+0x15/0x17 [ 2585.520955][T11202] should_fail+0x3c6/0x510 [ 2585.525208][T11202] ? anon_vma_fork+0xf7/0x4e0 [ 2585.529727][T11202] __should_failslab+0xa4/0xe0 [ 2585.534322][T11202] should_failslab+0x9/0x20 [ 2585.538658][T11202] kmem_cache_alloc+0x3d/0x2e0 [ 2585.543257][T11202] anon_vma_fork+0xf7/0x4e0 [ 2585.547594][T11202] ? anon_vma_name+0x4c/0x70 [ 2585.552027][T11202] ? vm_area_dup+0x1a1/0x270 [ 2585.556449][T11202] copy_mm+0x95a/0x13a0 [ 2585.560445][T11202] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2585.565917][T11202] ? copy_signal+0x610/0x610 [ 2585.570338][T11202] ? __init_rwsem+0xd6/0x1c0 [ 2585.574760][T11202] ? copy_signal+0x4e3/0x610 [ 2585.579192][T11202] copy_process+0x1175/0x3340 [ 2585.583705][T11202] ? __sched_text_start+0x8/0x8 [ 2585.588391][T11202] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2585.593345][T11202] ? copy_clone_args_from_user+0x744/0x830 [ 2585.598977][T11202] kernel_clone+0x21e/0x9e0 [ 2585.603320][T11202] ? __delayed_free_task+0x20/0x20 [ 2585.608271][T11202] ? create_io_thread+0x1e0/0x1e0 [ 2585.613144][T11202] __x64_sys_clone3+0x376/0x3a0 [ 2585.617812][T11202] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2585.622844][T11202] ? __ia32_sys_clone+0x290/0x290 [ 2585.627710][T11202] ? __kasan_check_read+0x11/0x20 [ 2585.632568][T11202] do_syscall_64+0x34/0x70 [ 2585.636822][T11202] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2585.642550][T11202] RIP: 0033:0x7fe73cec4ba9 [ 2585.646802][T11202] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2585.666241][T11202] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2585.674487][T11202] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2585.682301][T11202] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2585.690105][T11202] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2585.697918][T11202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:30:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r4) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2585.705730][T11202] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x22}}) 17:30:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="05ff8dc604baf4bd7a0f1f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x64, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x64}}, 0x20040000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="a8c08e4489669c5b0603f062e16dc87be742aa0f61bf49b1f5d3"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:30:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x3c}}) 17:30:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="05ff8dc604baf4bd7a0f1f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x64, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x64}}, 0x20040000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="a8c08e4489669c5b0603f062e16dc87be742aa0f61bf49b1f5d3"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:30:47 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="05ff8dc604baf4bd7a0f1f"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x64, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x64}}, 0x20040000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="a8c08e4489669c5b0603f062e16dc87be742aa0f61bf49b1f5d3"], 0xa8) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="a8c08e4489669c5b0603f062e16dc87be742aa0f61bf49b1f5d3"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:30:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x5c}}) 17:30:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 17:30:47 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x1fffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:47 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xf8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x66}}) 17:30:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r3}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r2) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) r6 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, 0x0, 0x25, 0x1, @val=@uprobe_multi={&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=[0x80000000, 0x2], &(0x7f00000003c0)=[0x1, 0x4], 0x2e, 0x2, 0x1, r6}}, 0x40) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="6fd7076bd4683680a3dba9e6c29205b9cae660f8884513bc6bf5372bf8fc8b381df4a498c3ea639e659b0be1e661fb59dee033959d79ed28057461aec0d2e312961e7a2f93b443e3", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$FUSE_LSEEK(r5, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x2}}, 0x18) [ 2586.241922][T11232] 9pnet: Insufficient options for proto=fd [ 2586.315840][T11238] FAULT_INJECTION: forcing a failure. [ 2586.315840][T11238] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.328318][T11238] CPU: 1 PID: 11238 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2586.338400][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2586.348295][T11238] Call Trace: [ 2586.351429][T11238] dump_stack_lvl+0x1e2/0x24b [ 2586.355940][T11238] ? panic+0x80b/0x80b [ 2586.359842][T11238] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2586.365191][T11238] ? rcu_read_unlock_special+0xd8/0x4c0 [ 2586.370520][T11238] dump_stack+0x15/0x17 [ 2586.374510][T11238] should_fail+0x3c6/0x510 [ 2586.378761][T11238] ? dup_fd+0x72/0xb00 [ 2586.382667][T11238] __should_failslab+0xa4/0xe0 [ 2586.387266][T11238] should_failslab+0x9/0x20 [ 2586.391606][T11238] kmem_cache_alloc+0x3d/0x2e0 [ 2586.396204][T11238] ? irqentry_exit+0x4f/0x60 [ 2586.400807][T11238] dup_fd+0x72/0xb00 [ 2586.404541][T11238] ? perf_event_init_task+0x70b/0x770 [ 2586.409749][T11238] ? init_entity_runnable_average+0x29/0xb0 [ 2586.415475][T11238] copy_files+0xe6/0x200 [ 2586.419560][T11238] ? perf_event_attrs+0x30/0x30 [ 2586.424241][T11238] ? dup_task_struct+0xc30/0xc30 [ 2586.429034][T11238] ? security_task_alloc+0xf9/0x130 [ 2586.434060][T11238] copy_process+0x10ac/0x3340 [ 2586.438565][T11238] ? __sched_text_start+0x8/0x8 [ 2586.443249][T11238] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2586.448195][T11238] ? copy_clone_args_from_user+0x744/0x830 [ 2586.453835][T11238] kernel_clone+0x21e/0x9e0 [ 2586.458175][T11238] ? __delayed_free_task+0x20/0x20 [ 2586.463121][T11238] ? create_io_thread+0x1e0/0x1e0 [ 2586.467989][T11238] __x64_sys_clone3+0x376/0x3a0 [ 2586.472671][T11238] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2586.477702][T11238] ? __ia32_sys_clone+0x290/0x290 [ 2586.482570][T11238] ? __kasan_check_read+0x11/0x20 [ 2586.487428][T11238] do_syscall_64+0x34/0x70 [ 2586.491679][T11238] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2586.497405][T11238] RIP: 0033:0x7fe73cec4ba9 [ 2586.501660][T11238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2586.521099][T11238] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2586.529342][T11238] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2586.537155][T11238] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2586.544966][T11238] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2586.552775][T11238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2586.560588][T11238] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r3}, 0x10) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r2) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) r6 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, 0x0, 0x25, 0x1, @val=@uprobe_multi={&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=[0x80000000, 0x2], &(0x7f00000003c0)=[0x1, 0x4], 0x2e, 0x2, 0x1, r6}}, 0x40) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="6fd7076bd4683680a3dba9e6c29205b9cae660f8884513bc6bf5372bf8fc8b381df4a498c3ea639e659b0be1e661fb59dee033959d79ed28057461aec0d2e312961e7a2f93b443e3", @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) write$FUSE_LSEEK(r5, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x2}}, 0x18) 17:30:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x68}}) 17:30:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r4) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcgss_need_reencode\x00', r3}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r2) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) getpgrp(0x0) (async) r6 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, 0x0, 0x25, 0x1, @val=@uprobe_multi={&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=[0x80000000, 0x2], &(0x7f00000003c0)=[0x1, 0x4], 0x2e, 0x2, 0x1, r6}}, 0x40) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, 0x0, 0x25, 0x1, @val=@uprobe_multi={&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=[0x80000000, 0x2], &(0x7f00000003c0)=[0x1, 0x4], 0x2e, 0x2, 0x1, r6}}, 0x40) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="6fd7076bd4683680a3dba9e6c29205b9cae660f8884513bc6bf5372bf8fc8b381df4a498c3ea639e659b0be1e661fb59dee033959d79ed28057461aec0d2e312961e7a2f93b443e3", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$FUSE_LSEEK(r5, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_LSEEK(r5, &(0x7f0000000500)={0x18, 0x0, 0x0, {0x2}}, 0x18) [ 2586.799507][T11241] 9pnet: Insufficient options for proto=fd 17:30:47 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x6a}}) 17:30:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000340)={[{@nfs_export_off}, {@nfs_export_off}, {@xino_off}, {@xino_auto}], [{@euid_lt={'euid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'syzkaller\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kmem_cache_free\x00'}}, {@seclabel}, {@seclabel}]}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000340)={[{@nfs_export_off}, {@nfs_export_off}, {@xino_off}, {@xino_auto}], [{@euid_lt={'euid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'syzkaller\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kmem_cache_free\x00'}}, {@seclabel}, {@seclabel}]}) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2586.855883][T11249] 9pnet: Insufficient options for proto=fd [ 2586.884660][T11255] overlayfs: unrecognized mount option "euid<00000000000000060928" or missing value 17:30:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 17:30:48 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x700000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x6b}}) 17:30:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000340)={[{@nfs_export_off}, {@nfs_export_off}, {@xino_off}, {@xino_auto}], [{@euid_lt={'euid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'syzkaller\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kmem_cache_free\x00'}}, {@seclabel}, {@seclabel}]}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:48 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xf8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x6c}}) [ 2587.092770][T11272] overlayfs: unrecognized mount option "euid<00000000000000060928" or missing value [ 2587.172801][T11277] FAULT_INJECTION: forcing a failure. [ 2587.172801][T11277] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.185248][T11277] CPU: 1 PID: 11277 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2587.195355][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2587.205247][T11277] Call Trace: [ 2587.208383][T11277] dump_stack_lvl+0x1e2/0x24b [ 2587.212886][T11277] ? panic+0x80b/0x80b [ 2587.216793][T11277] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2587.222091][T11277] ? __sched_text_start+0x8/0x8 [ 2587.226778][T11277] dump_stack+0x15/0x17 [ 2587.230770][T11277] should_fail+0x3c6/0x510 [ 2587.235020][T11277] ? dup_fd+0x72/0xb00 [ 2587.238935][T11277] __should_failslab+0xa4/0xe0 [ 2587.243530][T11277] should_failslab+0x9/0x20 [ 2587.247877][T11277] kmem_cache_alloc+0x3d/0x2e0 [ 2587.252465][T11277] ? irqentry_exit+0x4f/0x60 [ 2587.256891][T11277] dup_fd+0x72/0xb00 [ 2587.260629][T11277] ? perf_event_init_task+0x70b/0x770 [ 2587.265830][T11277] copy_files+0xe6/0x200 [ 2587.269915][T11277] ? perf_event_attrs+0x30/0x30 [ 2587.274595][T11277] ? dup_task_struct+0xc30/0xc30 [ 2587.279377][T11277] ? security_task_alloc+0xf9/0x130 [ 2587.284404][T11277] copy_process+0x10ac/0x3340 [ 2587.288921][T11277] ? __sched_text_start+0x8/0x8 [ 2587.293606][T11277] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2587.298556][T11277] ? copy_clone_args_from_user+0x744/0x830 [ 2587.304196][T11277] kernel_clone+0x21e/0x9e0 [ 2587.308533][T11277] ? __delayed_free_task+0x20/0x20 [ 2587.313479][T11277] ? create_io_thread+0x1e0/0x1e0 [ 2587.318342][T11277] __x64_sys_clone3+0x376/0x3a0 [ 2587.323026][T11277] ? __ia32_sys_clone+0x290/0x290 [ 2587.327892][T11277] ? ksys_write+0x260/0x2c0 [ 2587.332229][T11277] ? sysvec_call_function_single+0xcb/0xe0 [ 2587.337881][T11277] ? debug_smp_processor_id+0x17/0x20 [ 2587.343082][T11277] do_syscall_64+0x34/0x70 [ 2587.347329][T11277] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2587.353059][T11277] RIP: 0033:0x7fe73cec4ba9 [ 2587.357310][T11277] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2587.376751][T11277] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2587.384997][T11277] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2587.392806][T11277] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2587.400618][T11277] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2587.408428][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2587.416240][T11277] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000005e402200850000006d0000009527f6ffde97d07fde7d7840a4fffa3cf85bb18b87a747c45ecc1868ba9e8bd03330ea05f559c72d517e6696f424a37166c119422053ac58b8c3c88017ece144219312f3ec2458be3ac38b65e65e883ac03fe13acd836345924473579412fccb650b899f54beb6d945bfab5bf96b7da0c459931f3341614f868de0ef349eef6358db47f4f6ba3607c403d78ac151470d7309a27b6a"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0x84}}) 17:30:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000005e402200850000006d0000009527f6ffde97d07fde7d7840a4fffa3cf85bb18b87a747c45ecc1868ba9e8bd03330ea05f559c72d517e6696f424a37166c119422053ac58b8c3c88017ece144219312f3ec2458be3ac38b65e65e883ac03fe13acd836345924473579412fccb650b899f54beb6d945bfab5bf96b7da0c459931f3341614f868de0ef349eef6358db47f4f6ba3607c403d78ac151470d7309a27b6a"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xa0}}) 17:30:48 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xf8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 17:30:49 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x8002a0}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000000000005e402200850000006d0000009527f6ffde97d07fde7d7840a4fffa3cf85bb18b87a747c45ecc1868ba9e8bd03330ea05f559c72d517e6696f424a37166c119422053ac58b8c3c88017ece144219312f3ec2458be3ac38b65e65e883ac03fe13acd836345924473579412fccb650b899f54beb6d945bfab5bf96b7da0c459931f3341614f868de0ef349eef6358db47f4f6ba3607c403d78ac151470d7309a27b6a"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xf0}}) [ 2588.030263][T11309] FAULT_INJECTION: forcing a failure. [ 2588.030263][T11309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2588.043333][T11309] CPU: 1 PID: 11309 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2588.053438][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2588.063343][T11309] Call Trace: [ 2588.066467][T11309] dump_stack_lvl+0x1e2/0x24b [ 2588.070976][T11309] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2588.076273][T11309] dump_stack+0x15/0x17 [ 2588.080259][T11309] should_fail+0x3c6/0x510 [ 2588.084515][T11309] should_fail_alloc_page+0x52/0x60 [ 2588.089544][T11309] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2588.094754][T11309] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2588.100140][T11309] ? __kasan_check_write+0x14/0x20 [ 2588.105084][T11309] ? _raw_spin_lock+0xa4/0x1b0 [ 2588.109777][T11309] ? _raw_spin_trylock_bh+0x190/0x190 [ 2588.114982][T11309] __pmd_alloc+0x9c/0x410 [ 2588.119144][T11309] ? _raw_spin_unlock+0x4d/0x70 [ 2588.123830][T11309] ? __pud_alloc+0x213/0x260 [ 2588.128253][T11309] ? __pud_alloc+0x260/0x260 [ 2588.132683][T11309] copy_page_range+0x2c36/0x3020 [ 2588.137458][T11309] ? kmem_cache_alloc+0x168/0x2e0 [ 2588.142321][T11309] ? anon_vma_fork+0x1df/0x4e0 [ 2588.146913][T11309] ? copy_process+0x1175/0x3340 [ 2588.151601][T11309] ? kernel_clone+0x21e/0x9e0 [ 2588.156113][T11309] ? do_syscall_64+0x34/0x70 [ 2588.160538][T11309] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2588.166467][T11309] ? pfn_valid+0x1c0/0x1c0 [ 2588.170699][T11309] ? __kasan_check_write+0x14/0x20 [ 2588.175643][T11309] ? _raw_write_lock+0xa4/0x170 [ 2588.180328][T11309] ? _raw_write_trylock+0x1a0/0x1a0 [ 2588.185363][T11309] ? _raw_write_unlock+0x2e/0x60 [ 2588.190134][T11309] copy_mm+0xc4a/0x13a0 [ 2588.194125][T11309] ? copy_signal+0x399/0x610 [ 2588.198549][T11309] ? copy_signal+0x610/0x610 [ 2588.202970][T11309] ? __init_rwsem+0xd6/0x1c0 [ 2588.207395][T11309] ? copy_signal+0x4e3/0x610 [ 2588.211825][T11309] copy_process+0x1175/0x3340 [ 2588.216341][T11309] ? __sched_text_start+0x8/0x8 [ 2588.221026][T11309] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2588.225971][T11309] ? copy_clone_args_from_user+0x744/0x830 [ 2588.231718][T11309] kernel_clone+0x21e/0x9e0 [ 2588.236071][T11309] ? __delayed_free_task+0x20/0x20 [ 2588.241012][T11309] ? create_io_thread+0x1e0/0x1e0 [ 2588.245869][T11309] __x64_sys_clone3+0x376/0x3a0 [ 2588.250555][T11309] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2588.255582][T11309] ? __ia32_sys_clone+0x290/0x290 [ 2588.260452][T11309] ? __kasan_check_read+0x11/0x20 [ 2588.265304][T11309] do_syscall_64+0x34/0x70 [ 2588.269560][T11309] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2588.275292][T11309] RIP: 0033:0x7fe73cec4ba9 [ 2588.279539][T11309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2588.298984][T11309] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2588.307222][T11309] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2588.315120][T11309] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2588.322931][T11309] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2588.330740][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2588.338554][T11309] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [], 0xfa}}) 17:30:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x20}}], 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000340)={[{@metacopy_off}, {@metacopy_off}, {@xino_off}, {@metacopy_off}, {@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.%'}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_eq={'uid', 0x3d, r6}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}]}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r8 = dup(r2) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:49 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000735bb9c352f67378ed303000"/26], 0x15) r3 = dup(r2) copy_file_range(r0, &(0x7f00000000c0)=0x3f, r0, 0x0, 0x7, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pidfd_getfd(r4, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:30:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = getpid() (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x20}}], 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000340)={[{@metacopy_off}, {@metacopy_off}, {@xino_off}, {@metacopy_off}, {@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.%'}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_eq={'uid', 0x3d, r6}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}]}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 32) r8 = dup(r2) (rerun: 32) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 32) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:49 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000735bb9c352f67378ed303000"/26], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000735bb9c352f67378ed303000"/26], 0x15) r3 = dup(r2) copy_file_range(r0, &(0x7f00000000c0)=0x3f, r0, 0x0, 0x7, 0x0) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3f, r0, 0x0, 0x7, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pidfd_getfd(r4, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:30:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000735bb9c352f67378ed303000"/26], 0x15) r3 = dup(r2) copy_file_range(r0, &(0x7f00000000c0)=0x3f, r0, 0x0, 0x7, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pidfd_getfd(r4, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="15000000735bb9c352f67378ed303000"/26], 0x15) (async) dup(r2) (async) copy_file_range(r0, &(0x7f00000000c0)=0x3f, r0, 0x0, 0x7, 0x0) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) pipe2$watch_queue(&(0x7f0000000300), 0x80) (async) pidfd_getfd(r4, r3, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) (async) 17:30:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) [ 2588.876463][T11353] FAULT_INJECTION: forcing a failure. [ 2588.876463][T11353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2588.889982][T11353] CPU: 1 PID: 11353 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2588.900116][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2588.909998][T11353] Call Trace: [ 2588.913132][T11353] dump_stack_lvl+0x1e2/0x24b [ 2588.917638][T11353] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2588.922932][T11353] dump_stack+0x15/0x17 [ 2588.926924][T11353] should_fail+0x3c6/0x510 [ 2588.931177][T11353] should_fail_alloc_page+0x52/0x60 [ 2588.936207][T11353] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2588.941417][T11353] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2588.946800][T11353] ? _raw_spin_trylock_bh+0x190/0x190 [ 2588.952025][T11353] ? _raw_spin_lock+0xa4/0x1b0 [ 2588.956601][T11353] ? _raw_spin_trylock_bh+0x190/0x190 [ 2588.961813][T11353] pte_alloc_one+0x1f/0xc0 [ 2588.966064][T11353] __pte_alloc+0x75/0x2c0 [ 2588.970229][T11353] ? free_pgtables+0x3c0/0x3c0 [ 2588.974833][T11353] copy_page_range+0x29d8/0x3020 [ 2588.979604][T11353] ? __switch_to_asm+0x34/0x60 [ 2588.984207][T11353] ? preempt_schedule_notrace+0x140/0x140 [ 2588.989758][T11353] ? pfn_valid+0x1c0/0x1c0 [ 2588.994032][T11353] ? irqentry_exit+0x4f/0x60 [ 2588.998448][T11353] ? sysvec_reschedule_ipi+0x83/0x160 [ 2589.003659][T11353] ? __kasan_check_write+0x14/0x20 [ 2589.008595][T11353] ? _raw_write_lock+0xa4/0x170 [ 2589.013295][T11353] ? _raw_write_trylock+0x1a0/0x1a0 [ 2589.018332][T11353] ? _raw_write_unlock+0x2e/0x60 [ 2589.023102][T11353] copy_mm+0xc4a/0x13a0 [ 2589.027089][T11353] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2589.032552][T11353] ? copy_signal+0x610/0x610 [ 2589.036978][T11353] ? __init_rwsem+0xd6/0x1c0 [ 2589.041399][T11353] ? copy_signal+0x4e3/0x610 [ 2589.045825][T11353] copy_process+0x1175/0x3340 [ 2589.050343][T11353] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2589.055806][T11353] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2589.060756][T11353] ? copy_clone_args_from_user+0x744/0x830 [ 2589.066417][T11353] kernel_clone+0x21e/0x9e0 [ 2589.070741][T11353] ? __delayed_free_task+0x20/0x20 [ 2589.075683][T11353] ? create_io_thread+0x1e0/0x1e0 [ 2589.080549][T11353] ? __this_cpu_preempt_check+0x13/0x20 [ 2589.085931][T11353] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2589.092438][T11353] __x64_sys_clone3+0x376/0x3a0 [ 2589.097125][T11353] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2589.102155][T11353] ? __ia32_sys_clone+0x290/0x290 [ 2589.107020][T11353] ? __kasan_check_read+0x11/0x20 [ 2589.111878][T11353] do_syscall_64+0x34/0x70 [ 2589.116130][T11353] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2589.121857][T11353] RIP: 0033:0x7fe73cec4ba9 [ 2589.126111][T11353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2589.145550][T11353] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2589.153791][T11353] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2589.161603][T11353] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2589.169415][T11353] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2589.177225][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.185038][T11353] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:50 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x80000) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) write$P9_RAUTH(r4, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x40, 0x1, 0x1}}, 0x14) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = getpid() (async) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x20}}], 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000340)={[{@metacopy_off}, {@metacopy_off}, {@xino_off}, {@metacopy_off}, {@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.%'}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_eq={'uid', 0x3d, r6}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}]}) (async, rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (rerun: 64) r8 = dup(r2) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (rerun: 64) 17:30:50 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xc00e00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:50 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:50 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x80000) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) write$P9_RAUTH(r4, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x40, 0x1, 0x1}}, 0x14) (async) write$P9_RAUTH(r4, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x40, 0x1, 0x1}}, 0x14) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:50 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x80000) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) write$P9_RAUTH(r4, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x40, 0x1, 0x1}}, 0x14) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x80000) (async) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (async) sendfile(r4, r5, 0x0, 0x1000000201006) (async) write$P9_RAUTH(r4, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x40, 0x1, 0x1}}, 0x14) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (async) 17:30:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) 17:30:50 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2589.729142][T11381] FAULT_INJECTION: forcing a failure. [ 2589.729142][T11381] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.741608][T11381] CPU: 1 PID: 11381 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2589.751703][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2589.761598][T11381] Call Trace: [ 2589.764733][T11381] dump_stack_lvl+0x1e2/0x24b [ 2589.769239][T11381] ? panic+0x80b/0x80b [ 2589.773142][T11381] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2589.778441][T11381] dump_stack+0x15/0x17 [ 2589.782430][T11381] should_fail+0x3c6/0x510 [ 2589.786681][T11381] ? copy_fs_struct+0x4e/0x230 [ 2589.791282][T11381] __should_failslab+0xa4/0xe0 [ 2589.795885][T11381] should_failslab+0x9/0x20 [ 2589.800223][T11381] kmem_cache_alloc+0x3d/0x2e0 [ 2589.804820][T11381] ? copy_files+0xf3/0x200 [ 2589.809075][T11381] copy_fs_struct+0x4e/0x230 [ 2589.813500][T11381] copy_fs+0x71/0x140 [ 2589.817318][T11381] copy_process+0x10d7/0x3340 [ 2589.821834][T11381] ? memset+0x35/0x40 [ 2589.825655][T11381] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2589.830617][T11381] ? copy_clone_args_from_user+0x744/0x830 [ 2589.836243][T11381] kernel_clone+0x21e/0x9e0 [ 2589.840583][T11381] ? __delayed_free_task+0x20/0x20 [ 2589.845537][T11381] ? create_io_thread+0x1e0/0x1e0 [ 2589.850397][T11381] ? __this_cpu_preempt_check+0x13/0x20 [ 2589.855777][T11381] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2589.862281][T11381] __x64_sys_clone3+0x376/0x3a0 [ 2589.866967][T11381] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2589.871998][T11381] ? __ia32_sys_clone+0x290/0x290 [ 2589.876864][T11381] ? __kasan_check_read+0x11/0x20 [ 2589.881725][T11381] do_syscall_64+0x34/0x70 [ 2589.885975][T11381] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2589.891701][T11381] RIP: 0033:0x7fe73cec4ba9 [ 2589.895957][T11381] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2589.915400][T11381] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2589.923639][T11381] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2589.931452][T11381] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2589.939258][T11381] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2589.947074][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2589.954896][T11381] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="a47777d79849749360408e77d8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="a47777d79849749360408e77d8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="a47777d79849749360408e77d8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="a47777d79849749360408e77d8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (async) 17:30:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x80041285, &(0x7f0000000000)) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000006c0)={0x3, 0x5, 0x2, 0x4, 0x5, [{0x9, 0xffff, 0x3, '\x00', 0x1000}, {0x0, 0x3, 0x100, '\x00', 0x1181}, {0xfffffffffffffffa, 0x1000, 0xff, '\x00', 0x400}, {0x3, 0x36fa, 0x10000, '\x00', 0x2000}, {0x4, 0x0, 0x2, '\x00', 0x89}]}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000080)=ANY=[], 0xa8) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f00000000c0)=0x1ff, 0x4) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f0000000340)=""/191, 0xbf}], 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:51 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xf0ff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:51 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x2040) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x80041285, &(0x7f0000000000)) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000006c0)={0x3, 0x5, 0x2, 0x4, 0x5, [{0x9, 0xffff, 0x3, '\x00', 0x1000}, {0x0, 0x3, 0x100, '\x00', 0x1181}, {0xfffffffffffffffa, 0x1000, 0xff, '\x00', 0x400}, {0x3, 0x36fa, 0x10000, '\x00', 0x2000}, {0x4, 0x0, 0x2, '\x00', 0x89}]}) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000080)=ANY=[], 0xa8) (async) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async, rerun: 32) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (rerun: 32) sendfile(r5, r6, 0x0, 0x1000000201006) (async) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f00000000c0)=0x1ff, 0x4) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f0000000340)=""/191, 0xbf}], 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x2040) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 32) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) 17:30:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x80041285, &(0x7f0000000000)) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000006c0)={0x3, 0x5, 0x2, 0x4, 0x5, [{0x9, 0xffff, 0x3, '\x00', 0x1000}, {0x0, 0x3, 0x100, '\x00', 0x1181}, {0xfffffffffffffffa, 0x1000, 0xff, '\x00', 0x400}, {0x3, 0x36fa, 0x10000, '\x00', 0x2000}, {0x4, 0x0, 0x2, '\x00', 0x89}]}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r2) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000080)=ANY=[], 0xa8) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) (async) sendfile(r5, r6, 0x0, 0x1000000201006) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f00000000c0)=0x1ff, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f00000000c0)=0x1ff, 0x4) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f0000000340)=""/191, 0xbf}], 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) chdir(&(0x7f0000000040)='./file0\x00') write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2590.582438][T11437] FAULT_INJECTION: forcing a failure. [ 2590.582438][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.594922][T11437] CPU: 1 PID: 11437 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2590.605004][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2590.614894][T11437] Call Trace: [ 2590.618040][T11437] dump_stack_lvl+0x1e2/0x24b [ 2590.622538][T11437] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2590.627838][T11437] ? preempt_schedule+0xd9/0xe0 [ 2590.632521][T11437] dump_stack+0x15/0x17 [ 2590.636511][T11437] should_fail+0x3c6/0x510 [ 2590.640765][T11437] ? copy_sighand+0x54/0x250 [ 2590.645194][T11437] __should_failslab+0xa4/0xe0 [ 2590.649794][T11437] should_failslab+0x9/0x20 [ 2590.654127][T11437] kmem_cache_alloc+0x3d/0x2e0 [ 2590.658730][T11437] ? _raw_spin_unlock+0x60/0x70 [ 2590.663413][T11437] copy_sighand+0x54/0x250 [ 2590.667667][T11437] copy_process+0x1102/0x3340 [ 2590.672183][T11437] ? copy_clone_args_from_user+0x14e/0x830 [ 2590.677822][T11437] ? copy_clone_args_from_user+0x159/0x830 [ 2590.683464][T11437] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2590.688412][T11437] ? copy_clone_args_from_user+0x744/0x830 [ 2590.694053][T11437] kernel_clone+0x21e/0x9e0 [ 2590.698392][T11437] ? __delayed_free_task+0x20/0x20 [ 2590.703339][T11437] ? create_io_thread+0x1e0/0x1e0 [ 2590.708203][T11437] ? __this_cpu_preempt_check+0x13/0x20 [ 2590.713581][T11437] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2590.720095][T11437] __x64_sys_clone3+0x376/0x3a0 [ 2590.724776][T11437] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2590.729811][T11437] ? __ia32_sys_clone+0x290/0x290 [ 2590.734679][T11437] ? __kasan_check_read+0x11/0x20 [ 2590.739542][T11437] do_syscall_64+0x34/0x70 [ 2590.743787][T11437] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2590.749511][T11437] RIP: 0033:0x7fe73cec4ba9 [ 2590.753766][T11437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2590.773207][T11437] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2590.781451][T11437] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2590.789275][T11437] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2590.797076][T11437] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2590.804894][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.812699][T11437] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x2040) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r1) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) chdir(&(0x7f0000000040)='./file0\x00') write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:52 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:52 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) chdir(&(0x7f0000000040)='./file0\x00') write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) 17:30:52 executing program 4: r0 = open(&(0x7f0000001340)='./bus\x00', 0x141142, 0x9) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0xe31, 0x221380) fallocate(r4, 0x10, 0x9, 0x4) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r3) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="e0196318fe297961bc28188df30f034bfd428396a650278b85af7bda"]) 17:30:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) pipe2(&(0x7f0000000080), 0x80000) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) write$P9_RLERRORu(r5, &(0x7f0000000040)={0x12, 0x7, 0x2, {{0x5, 'rfdno'}, 0x3}}, 0x12) 17:30:52 executing program 4: r0 = open(&(0x7f0000001340)='./bus\x00', 0x141142, 0x9) (async, rerun: 64) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 64) sendfile(r0, r1, 0x0, 0x1000000201005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0xe31, 0x221380) fallocate(r4, 0x10, 0x9, 0x4) (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r3) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="e0196318fe297961bc28188df30f034bfd428396a650278b85af7bda"]) [ 2591.179945][T11462] 9pnet: Insufficient options for proto=fd [ 2591.248727][T11474] 9pnet: Insufficient options for proto=fd 17:30:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) 17:30:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) pipe2(&(0x7f0000000080), 0x80000) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) write$P9_RLERRORu(r5, &(0x7f0000000040)={0x12, 0x7, 0x2, {{0x5, 'rfdno'}, 0x3}}, 0x12) 17:30:52 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:52 executing program 4: open(&(0x7f0000001340)='./bus\x00', 0x141142, 0x9) (async) r0 = open(&(0x7f0000001340)='./bus\x00', 0x141142, 0x9) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) (async) sendfile(r0, r1, 0x0, 0x1000000201005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0xe31, 0x221380) (async) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0xe31, 0x221380) fallocate(r4, 0x10, 0x9, 0x4) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r3) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="e0196318fe297961bc28188df30f034bfd428396a650278b85af7bda"]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="e0196318fe297961bc28188df30f034bfd428396a650278b85af7bda"]) 17:30:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) r5 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x1) r6 = accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000380)=[{r1, 0x1}, {r5, 0x20}, {r6, 0xc7}, {r0, 0x100}, {r7, 0x80}, {r3, 0x1260}, {r0, 0x2109}], 0x7, 0x8000) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 17:30:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) pipe2(&(0x7f0000000080), 0x80000) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) (async) write$P9_RLERRORu(r5, &(0x7f0000000040)={0x12, 0x7, 0x2, {{0x5, 'rfdno'}, 0x3}}, 0x12) [ 2591.334236][T11481] 9pnet: Insufficient options for proto=fd [ 2591.348621][T11483] 9pnet: Insufficient options for proto=fd [ 2591.442494][T11493] FAULT_INJECTION: forcing a failure. [ 2591.442494][T11493] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.454947][T11493] CPU: 1 PID: 11493 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2591.465054][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2591.474946][T11493] Call Trace: [ 2591.478086][T11493] dump_stack_lvl+0x1e2/0x24b [ 2591.482587][T11493] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2591.487881][T11493] ? irqentry_exit+0x4f/0x60 [ 2591.492308][T11493] ? sysvec_reschedule_ipi+0x83/0x160 [ 2591.497516][T11493] dump_stack+0x15/0x17 [ 2591.501514][T11493] should_fail+0x3c6/0x510 [ 2591.505788][T11493] ? copy_mm+0x198/0x13a0 [ 2591.509929][T11493] __should_failslab+0xa4/0xe0 [ 2591.514537][T11493] should_failslab+0x9/0x20 [ 2591.518866][T11493] kmem_cache_alloc+0x3d/0x2e0 [ 2591.523467][T11493] copy_mm+0x198/0x13a0 [ 2591.527458][T11493] ? irqentry_exit+0x4f/0x60 [ 2591.531984][T11493] ? _raw_spin_lock+0xa4/0x1b0 [ 2591.536583][T11493] ? copy_signal+0x610/0x610 [ 2591.541008][T11493] ? __kasan_check_write+0x14/0x20 [ 2591.545954][T11493] ? __init_rwsem+0xd6/0x1c0 [ 2591.550383][T11493] ? copy_signal+0x4e3/0x610 [ 2591.554810][T11493] copy_process+0x1175/0x3340 [ 2591.559324][T11493] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2591.564269][T11493] ? copy_clone_args_from_user+0x744/0x830 [ 2591.569908][T11493] kernel_clone+0x21e/0x9e0 [ 2591.574247][T11493] ? __delayed_free_task+0x20/0x20 [ 2591.579195][T11493] ? create_io_thread+0x1e0/0x1e0 [ 2591.584054][T11493] ? sysvec_reschedule_ipi+0x83/0x160 [ 2591.589266][T11493] __x64_sys_clone3+0x376/0x3a0 [ 2591.593950][T11493] ? ksys_write+0x244/0x2c0 [ 2591.598292][T11493] ? fput+0xd/0x20 [ 2591.601847][T11493] ? __ia32_sys_clone+0x290/0x290 [ 2591.606715][T11493] ? __kasan_check_read+0x11/0x20 [ 2591.611572][T11493] do_syscall_64+0x34/0x70 [ 2591.615824][T11493] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2591.621553][T11493] RIP: 0033:0x7fe73cec4ba9 [ 2591.625805][T11493] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2591.645249][T11493] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2591.653490][T11493] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2591.661300][T11493] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2591.669109][T11493] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2591.676921][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2591.684734][T11493] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:53 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r4 = dup(r3) (async) r5 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x1) r6 = accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) (async) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000380)=[{r1, 0x1}, {r5, 0x20}, {r6, 0xc7}, {r0, 0x100}, {r7, 0x80}, {r3, 0x1260}, {r0, 0x2109}], 0x7, 0x8000) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 17:30:53 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) 17:30:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) r5 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x1) (async) r6 = accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) (async) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) poll(&(0x7f0000000380)=[{r1, 0x1}, {r5, 0x20}, {r6, 0xc7}, {r0, 0x100}, {r7, 0x80}, {r3, 0x1260}, {r0, 0x2109}], 0x7, 0x8000) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 32) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 17:30:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4acb80, 0xc) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="b1a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000003", @ANYRES32=r3, @ANYBLOB="800800000a000200aa"], 0x28}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r5 = dup(r1) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x20000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) 17:30:53 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2592.295161][T11533] FAULT_INJECTION: forcing a failure. [ 2592.295161][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.307687][T11533] CPU: 1 PID: 11533 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2592.317721][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2592.327618][T11533] Call Trace: [ 2592.330761][T11533] dump_stack_lvl+0x1e2/0x24b [ 2592.335258][T11533] ? panic+0x80b/0x80b [ 2592.339161][T11533] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2592.344462][T11533] dump_stack+0x15/0x17 [ 2592.348442][T11533] should_fail+0x3c6/0x510 [ 2592.352690][T11533] ? anon_vma_clone+0x9a/0x500 [ 2592.357292][T11533] __should_failslab+0xa4/0xe0 [ 2592.361891][T11533] should_failslab+0x9/0x20 [ 2592.366228][T11533] kmem_cache_alloc+0x3d/0x2e0 [ 2592.370833][T11533] anon_vma_clone+0x9a/0x500 [ 2592.375261][T11533] ? vm_area_dup+0x26/0x270 [ 2592.379597][T11533] anon_vma_fork+0x91/0x4e0 [ 2592.383934][T11533] ? anon_vma_name+0x4c/0x70 [ 2592.388363][T11533] ? vm_area_dup+0x1a1/0x270 [ 2592.392788][T11533] copy_mm+0x95a/0x13a0 [ 2592.396781][T11533] ? copy_signal+0x610/0x610 [ 2592.401208][T11533] ? __init_rwsem+0xd6/0x1c0 [ 2592.405632][T11533] ? copy_signal+0x4e3/0x610 [ 2592.410062][T11533] copy_process+0x1175/0x3340 [ 2592.414577][T11533] ? __sched_text_start+0x8/0x8 [ 2592.419262][T11533] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2592.424207][T11533] ? copy_clone_args_from_user+0x744/0x830 [ 2592.429856][T11533] kernel_clone+0x21e/0x9e0 [ 2592.434189][T11533] ? __delayed_free_task+0x20/0x20 [ 2592.439136][T11533] ? create_io_thread+0x1e0/0x1e0 [ 2592.443997][T11533] __x64_sys_clone3+0x376/0x3a0 [ 2592.448686][T11533] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2592.453716][T11533] ? __ia32_sys_clone+0x290/0x290 [ 2592.458583][T11533] ? __kasan_check_read+0x11/0x20 [ 2592.463439][T11533] do_syscall_64+0x34/0x70 [ 2592.467690][T11533] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2592.473419][T11533] RIP: 0033:0x7fe73cec4ba9 [ 2592.477674][T11533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2592.497115][T11533] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2592.505356][T11533] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2592.513166][T11533] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2592.520977][T11533] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2592.528787][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2592.536600][T11533] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000003", @ANYRES32=r3, @ANYBLOB="800800000a000200aa"], 0x28}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) r5 = dup(r1) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 32) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x20000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) 17:30:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) open(&(0x7f0000000040)='./file0\x00', 0x4acb80, 0xc) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="b1a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:54 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000003", @ANYRES32=r3, @ANYBLOB="800800000a000200aa"], 0x28}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r5 = dup(r1) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x20000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000003", @ANYRES32=r3, @ANYBLOB="800800000a000200aa"], 0x28}}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x20000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}], [{@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) (async) 17:30:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe78, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x8, 0x3, 0x2, 0x20, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2c}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r4, r4, r4], &(0x7f00000004c0)=[{0x4, 0x2, 0x0, 0x3}], 0x10, 0x10000}, 0x90) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) r7 = dup3(r3, r1, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f00000005c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x8, 0x80, 0xfffffffffffffffc}], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r8, 0x1c, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x5, 0x8, 0x5}, 0x10, 0x0, r4, 0x0, &(0x7f0000000740)=[r0], 0x0, 0x10, 0x2}, 0x90) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000840)=0x101) 17:30:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) 17:30:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x4acb80, 0xc) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="b1a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe78, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x8, 0x3, 0x2, 0x20, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2c}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r4, r4, r4], &(0x7f00000004c0)=[{0x4, 0x2, 0x0, 0x3}], 0x10, 0x10000}, 0x90) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) (async) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) r7 = dup3(r3, r1, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f00000005c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x8, 0x80, 0xfffffffffffffffc}], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r8, 0x1c, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x5, 0x8, 0x5}, 0x10, 0x0, r4, 0x0, &(0x7f0000000740)=[r0], 0x0, 0x10, 0x2}, 0x90) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000840)=0x101) 17:30:54 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2593.147779][T11585] FAULT_INJECTION: forcing a failure. [ 2593.147779][T11585] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.160276][T11585] CPU: 1 PID: 11585 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2593.170345][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2593.180232][T11585] Call Trace: [ 2593.183368][T11585] dump_stack_lvl+0x1e2/0x24b [ 2593.187873][T11585] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2593.193167][T11585] ? preempt_schedule_irq+0xe7/0x140 [ 2593.198289][T11585] dump_stack+0x15/0x17 [ 2593.202282][T11585] should_fail+0x3c6/0x510 [ 2593.206535][T11585] ? mm_init+0x378/0x8e0 [ 2593.210621][T11585] __should_failslab+0xa4/0xe0 [ 2593.215212][T11585] should_failslab+0x9/0x20 [ 2593.219559][T11585] kmem_cache_alloc_trace+0x3a/0x2e0 [ 2593.224690][T11585] mm_init+0x378/0x8e0 [ 2593.228578][T11585] copy_mm+0x1e3/0x13a0 [ 2593.232573][T11585] ? irqentry_exit+0x4f/0x60 [ 2593.236994][T11585] ? sysvec_reschedule_ipi+0x83/0x160 [ 2593.242205][T11585] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2593.247673][T11585] ? copy_signal+0x610/0x610 [ 2593.252102][T11585] ? __kasan_check_write+0x14/0x20 [ 2593.257045][T11585] ? __init_rwsem+0xd6/0x1c0 [ 2593.261472][T11585] ? copy_signal+0x4e3/0x610 [ 2593.265897][T11585] copy_process+0x1175/0x3340 [ 2593.270413][T11585] ? __check_object_size+0x2b/0x3c0 [ 2593.275458][T11585] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2593.280664][T11585] ? copy_clone_args_from_user+0x744/0x830 [ 2593.286291][T11585] kernel_clone+0x21e/0x9e0 [ 2593.290635][T11585] ? __delayed_free_task+0x20/0x20 [ 2593.295580][T11585] ? create_io_thread+0x1e0/0x1e0 [ 2593.300441][T11585] ? __this_cpu_preempt_check+0x13/0x20 [ 2593.305821][T11585] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2593.312333][T11585] __x64_sys_clone3+0x376/0x3a0 [ 2593.317019][T11585] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2593.322052][T11585] ? __ia32_sys_clone+0x290/0x290 [ 2593.326922][T11585] ? __kasan_check_read+0x11/0x20 [ 2593.331776][T11585] do_syscall_64+0x34/0x70 [ 2593.336025][T11585] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2593.341755][T11585] RIP: 0033:0x7fe73cec4ba9 [ 2593.346016][T11585] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2593.365446][T11585] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2593.373692][T11585] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2593.381505][T11585] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2593.389314][T11585] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2593.397123][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2593.404943][T11585] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe78, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x8, 0x3, 0x2, 0x20, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2c}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r4, r4, r4], &(0x7f00000004c0)=[{0x4, 0x2, 0x0, 0x3}], 0x10, 0x10000}, 0x90) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) r7 = dup3(r3, r1, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f00000005c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xc6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x8, 0x80, 0xfffffffffffffffc}], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r8, 0x1c, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x5, 0x8, 0x5}, 0x10, 0x0, r4, 0x0, &(0x7f0000000740)=[r0], 0x0, 0x10, 0x2}, 0x90) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000840)=0x101) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000840)=0x101) 17:30:54 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x110, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180110f6c8c32beb8fc2d38f98017400000000005e00220085af218a59ed3047f1ae2e6458bd6b075e337ba5e1bf2b70f7b2e27cdf5b1aef877829cfe90867e0b5aa0a9d88f4c025d32d890ce8be11e270f33e3987978bcd0b46cbb727eaac31a24b5a91ca6e1a4716e58e76d5c5c8b2a7611a622a20ff032cbf64d7742082cca9e6ae59952ebf382ec02ca59c6594625e970458e7023c4ce2b4e05b8a4e378fea8669d6eef5f9069c6fda86696276bb7d86c289b272eb6121f98b3af44715c1b33f218f3937c4d98dac34de1d38722b781ac251e116aeb8b6a5e2e209d8"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007ffb) write$P9_RSTATFS(r4, &(0x7f00000005c0)={0x43, 0x9, 0x2, {0x3f, 0x1, 0x8000000000000001, 0x3, 0xfffffffffffff801, 0x4f57, 0x7, 0x7, 0xfffffff8}}, 0x43) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10a0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@mmap}], [{@obj_user={'obj_user', 0x3d, '#i:@$.*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wfdno'}}]}}) 17:30:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40a480, 0x8e) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.swap.current\x00', 0x0, 0x0) r6 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x6, 0x1c, 0x6, 0xfffffffffffffff4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x4, 0x4, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x66, &(0x7f0000000080)=""/102, 0x40f00, 0x43, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10, 0x400, 0x6af7ff81}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[r3, r4, r5, 0x1, r7, 0x1, 0x1], &(0x7f0000000700)=[{0x2, 0x4, 0x3, 0x5}, {0x3, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x3, 0xc}, {0x5, 0x3, 0xa, 0x2}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x5, 0xb, 0xb}, {0x4, 0x4, 0xb, 0xc}], 0x10, 0xf}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_any}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x10044840) 17:30:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="d60e135a2c19c17ca2b688e9623b35680ad966de46d2294fcc0ca523aab8e691e8fbc0be0af8fa6d2ab686d17c4fe318138c93ea4aa8199297f10ae26c4cb480107f3ed51a347d41b28a0371fe1e6572a201fdbc9432a389c33a6a3aad192717e7e6eacb8faef8d0ed6116ae49fa88dee903a0f389dae1b4fa3d3a39fafcee5739f2131a736bc093fc90be1263070bc73a48fdbb8d74786d0e0e44e598b78356b1a7dc812ca06585277386ac7d949f84b6d91caea81456ee2798250f934873e2bdd45d083383be3de031fb9fb7279ece5366a2cbd873c3cd8a9fecf401f8b8a0332d9ea02efb178648ca52c3b3b127dd7e0014faf1070332ca6866", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40a480, 0x8e) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.swap.current\x00', 0x0, 0x0) (async) r6 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r7 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201006) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x6, 0x1c, 0x6, 0xfffffffffffffff4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x4, 0x4, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x66, &(0x7f0000000080)=""/102, 0x40f00, 0x43, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10, 0x400, 0x6af7ff81}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[r3, r4, r5, 0x1, r7, 0x1, 0x1], &(0x7f0000000700)=[{0x2, 0x4, 0x3, 0x5}, {0x3, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x3, 0xc}, {0x5, 0x3, 0xa, 0x2}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x5, 0xb, 0xb}, {0x4, 0x4, 0xb, 0xc}], 0x10, 0xf}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_any}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x10044840) 17:30:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180110f6c8c32beb8fc2d38f98017400000000005e00220085af218a59ed3047f1ae2e6458bd6b075e337ba5e1bf2b70f7b2e27cdf5b1aef877829cfe90867e0b5aa0a9d88f4c025d32d890ce8be11e270f33e3987978bcd0b46cbb727eaac31a24b5a91ca6e1a4716e58e76d5c5c8b2a7611a622a20ff032cbf64d7742082cca9e6ae59952ebf382ec02ca59c6594625e970458e7023c4ce2b4e05b8a4e378fea8669d6eef5f9069c6fda86696276bb7d86c289b272eb6121f98b3af44715c1b33f218f3937c4d98dac34de1d38722b781ac251e116aeb8b6a5e2e209d8"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007ffb) (async) write$P9_RSTATFS(r4, &(0x7f00000005c0)={0x43, 0x9, 0x2, {0x3f, 0x1, 0x8000000000000001, 0x3, 0xfffffffffffff801, 0x4f57, 0x7, 0x7, 0xfffffff8}}, 0x43) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10a0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@mmap}], [{@obj_user={'obj_user', 0x3d, '#i:@$.*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wfdno'}}]}}) 17:30:54 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 17:30:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1000000201006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@remote, 0x0}, &(0x7f0000000380)=0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40a480, 0x8e) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40a480, 0x8e) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.swap.current\x00', 0x0, 0x0) r6 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r7 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x1000000201006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x6, 0x1c, 0x6, 0xfffffffffffffff4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x4, 0x4, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x66, &(0x7f0000000080)=""/102, 0x40f00, 0x43, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10, 0x400, 0x6af7ff81}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[r3, r4, r5, 0x1, r7, 0x1, 0x1], &(0x7f0000000700)=[{0x2, 0x4, 0x3, 0x5}, {0x3, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x3, 0xc}, {0x5, 0x3, 0xa, 0x2}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x5, 0xb, 0xb}, {0x4, 0x4, 0xb, 0xc}], 0x10, 0xf}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x6, 0x1c, 0x6, 0xfffffffffffffff4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x4, 0x4, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x66, &(0x7f0000000080)=""/102, 0x40f00, 0x43, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10, 0x400, 0x6af7ff81}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[r3, r4, r5, 0x1, r7, 0x1, 0x1], &(0x7f0000000700)=[{0x2, 0x4, 0x3, 0x5}, {0x3, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x3, 0xc}, {0x5, 0x3, 0xa, 0x2}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x5, 0xb, 0xb}, {0x4, 0x4, 0xb, 0xc}], 0x10, 0xf}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_any}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x10044840) 17:30:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180110f6c8c32beb8fc2d38f98017400000000005e00220085af218a59ed3047f1ae2e6458bd6b075e337ba5e1bf2b70f7b2e27cdf5b1aef877829cfe90867e0b5aa0a9d88f4c025d32d890ce8be11e270f33e3987978bcd0b46cbb727eaac31a24b5a91ca6e1a4716e58e76d5c5c8b2a7611a622a20ff032cbf64d7742082cca9e6ae59952ebf382ec02ca59c6594625e970458e7023c4ce2b4e05b8a4e378fea8669d6eef5f9069c6fda86696276bb7d86c289b272eb6121f98b3af44715c1b33f218f3937c4d98dac34de1d38722b781ac251e116aeb8b6a5e2e209d8"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2007ffb) write$P9_RSTATFS(r4, &(0x7f00000005c0)={0x43, 0x9, 0x2, {0x3f, 0x1, 0x8000000000000001, 0x3, 0xfffffffffffff801, 0x4f57, 0x7, 0x7, 0xfffffff8}}, 0x43) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10a0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@mmap}], [{@obj_user={'obj_user', 0x3d, '#i:@$.*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wfdno'}}]}}) 17:30:54 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x110, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) [ 2594.002058][T11629] FAULT_INJECTION: forcing a failure. [ 2594.002058][T11629] name failslab, interval 1, probability 0, space 0, times 0 [ 2594.014536][T11629] CPU: 1 PID: 11629 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2594.024618][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2594.034513][T11629] Call Trace: [ 2594.037653][T11629] dump_stack_lvl+0x1e2/0x24b [ 2594.042154][T11629] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2594.047449][T11629] ? preempt_schedule_irq+0xe7/0x140 [ 2594.052676][T11629] dump_stack+0x15/0x17 [ 2594.056657][T11629] should_fail+0x3c6/0x510 [ 2594.060912][T11629] ? mm_init+0x378/0x8e0 [ 2594.064991][T11629] __should_failslab+0xa4/0xe0 [ 2594.069584][T11629] should_failslab+0x9/0x20 [ 2594.073921][T11629] kmem_cache_alloc_trace+0x3a/0x2e0 [ 2594.079043][T11629] mm_init+0x378/0x8e0 [ 2594.082943][T11629] copy_mm+0x1e3/0x13a0 [ 2594.086939][T11629] ? _raw_spin_lock+0xa4/0x1b0 [ 2594.091541][T11629] ? copy_signal+0x610/0x610 [ 2594.095961][T11629] ? __kasan_check_write+0x14/0x20 [ 2594.100911][T11629] ? __init_rwsem+0xd6/0x1c0 [ 2594.105424][T11629] ? copy_signal+0x4e3/0x610 [ 2594.109851][T11629] copy_process+0x1175/0x3340 [ 2594.114366][T11629] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2594.119832][T11629] ? copy_clone_args_from_user+0x14e/0x830 [ 2594.125471][T11629] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2594.130421][T11629] ? copy_clone_args_from_user+0x744/0x830 [ 2594.136060][T11629] kernel_clone+0x21e/0x9e0 [ 2594.140407][T11629] ? __delayed_free_task+0x20/0x20 [ 2594.145350][T11629] ? create_io_thread+0x1e0/0x1e0 [ 2594.150208][T11629] ? __this_cpu_preempt_check+0x13/0x20 [ 2594.155588][T11629] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2594.162099][T11629] __x64_sys_clone3+0x376/0x3a0 [ 2594.166787][T11629] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2594.171909][T11629] ? __ia32_sys_clone+0x290/0x290 [ 2594.176782][T11629] ? __kasan_check_read+0x11/0x20 [ 2594.181629][T11629] do_syscall_64+0x34/0x70 [ 2594.185880][T11629] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2594.191615][T11629] RIP: 0033:0x7fe73cec4ba9 [ 2594.195863][T11629] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2594.215303][T11629] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2594.224587][T11629] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2594.232400][T11629] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2594.240210][T11629] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2594.248020][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2594.255831][T11629] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x2, 0x1}) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:30:55 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x110, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x2, 0x1}) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x2, 0x1}) (async) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r4) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) 17:30:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:55 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x9000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}, {&(0x7f0000000f40)}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) 17:30:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x2, 0x1}) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x1) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:30:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x58) r2 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201006) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x3, 0x0}, 0x8) r5 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) r7 = syz_open_dev$vcsa(&(0x7f0000000c00), 0x0, 0x100900) r8 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x1000000201005) r10 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x1000000201005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x2, &(0x7f0000000980)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb037}], &(0x7f00000009c0)='syzkaller\x00', 0x9, 0x20, &(0x7f0000000a00)=""/32, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[r3, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0x1, r9, r1, r11], &(0x7f0000000c80)=[{0x4, 0x2, 0x9, 0x5}, {0x4, 0x2, 0xf, 0x1}], 0x10, 0x6}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r14 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0xc001) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x17, &(0x7f00000008c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @generic={0x20, 0xd, 0x5, 0x52, 0xff}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9717}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x7, 0x8000000000000001, 0x4}, @generic={0x3f, 0xa, 0x5, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000340)='GPL\x00', 0x1, 0xc5, &(0x7f00000004c0)=""/197, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xa, 0x1, 0x6}, 0x10, r4, r0, 0x6, &(0x7f0000000680)=[r5, r14], &(0x7f00000006c0)=[{0x2, 0x2, 0xd, 0x7}, {0x4, 0x5, 0x1, 0xc}, {0x7fffffff, 0x5, 0x7, 0x2}, {0x5, 0x1, 0x3, 0x2}, {0x5, 0x3, 0x8, 0xc}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0x4}, 0x90) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r17, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r18 = dup(r17) write$FUSE_DIRENTPLUS(r18, &(0x7f0000000d80)=ANY=[@ANYBLOB="e816aac9a87df19a0461dedb4351264eaa3b3e7eb924ab8a746be6b3a1f9e5b1f99cca967aef5a2d9bc56235d4480dd3527987b33513d830648f96c01dcf5d6bffb17d91e1818d557da824ed7a4ddf5ea7548405f7e654e5fbc893ff6e7eb7a3a1ac01c35ba11bbe540f92a6bbad261ab800e5ecb8f1b6ee63b7c4dee90bbdde0aba38232fc49cbe9e090ebc72abb2f156a10a4e285bbeeb7b04769a2a8081a773bb6f4458ad073897c5deed7a368123f572f19f1a0bf4fa0681139a8d612a974b22fd"], 0xa8) write$FUSE_CREATE_OPEN(r18, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf11f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}, 0xa0) poll(&(0x7f00000000c0)=[{r3, 0x4}, {r15, 0x4004}, {r6, 0x8181}, {r12, 0x5034}], 0x4, 0x5c62) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r17}, 0x2c, {[{@access_any}]}}) 17:30:55 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x110, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='br_fdb_update\x00', r3}, 0x10) dup(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) umount2(&(0x7f0000000040)='./file0\x00', 0x9) 17:30:55 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x58) r2 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201006) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x3, 0x0}, 0x8) r5 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000c00), 0x0, 0x100900) (async) r8 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x1000000201005) (async) r10 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x1000000201005) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x2, &(0x7f0000000980)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb037}], &(0x7f00000009c0)='syzkaller\x00', 0x9, 0x20, &(0x7f0000000a00)=""/32, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[r3, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0x1, r9, r1, r11], &(0x7f0000000c80)=[{0x4, 0x2, 0x9, 0x5}, {0x4, 0x2, 0xf, 0x1}], 0x10, 0x6}, 0x90) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r14 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0xc001) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x17, &(0x7f00000008c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @generic={0x20, 0xd, 0x5, 0x52, 0xff}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9717}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x7, 0x8000000000000001, 0x4}, @generic={0x3f, 0xa, 0x5, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000340)='GPL\x00', 0x1, 0xc5, &(0x7f00000004c0)=""/197, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xa, 0x1, 0x6}, 0x10, r4, r0, 0x6, &(0x7f0000000680)=[r5, r14], &(0x7f00000006c0)=[{0x2, 0x2, 0xd, 0x7}, {0x4, 0x5, 0x1, 0xc}, {0x7fffffff, 0x5, 0x7, 0x2}, {0x5, 0x1, 0x3, 0x2}, {0x5, 0x3, 0x8, 0xc}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0x4}, 0x90) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r17, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 64) r18 = dup(r17) (rerun: 64) write$FUSE_DIRENTPLUS(r18, &(0x7f0000000d80)=ANY=[@ANYBLOB="e816aac9a87df19a0461dedb4351264eaa3b3e7eb924ab8a746be6b3a1f9e5b1f99cca967aef5a2d9bc56235d4480dd3527987b33513d830648f96c01dcf5d6bffb17d91e1818d557da824ed7a4ddf5ea7548405f7e654e5fbc893ff6e7eb7a3a1ac01c35ba11bbe540f92a6bbad261ab800e5ecb8f1b6ee63b7c4dee90bbdde0aba38232fc49cbe9e090ebc72abb2f156a10a4e285bbeeb7b04769a2a8081a773bb6f4458ad073897c5deed7a368123f572f19f1a0bf4fa0681139a8d612a974b22fd"], 0xa8) write$FUSE_CREATE_OPEN(r18, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf11f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}, 0xa0) (async) poll(&(0x7f00000000c0)=[{r3, 0x4}, {r15, 0x4004}, {r6, 0x8181}, {r12, 0x5034}], 0x4, 0x5c62) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r17}, 0x2c, {[{@access_any}]}}) 17:30:55 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x58) open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r2 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201006) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x3, 0x0}, 0x8) r5 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) syz_open_dev$vcsa(&(0x7f0000000c00), 0x0, 0x100900) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000c00), 0x0, 0x100900) r8 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x1000000201005) r10 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r11 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x1000000201005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x2, &(0x7f0000000980)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb037}], &(0x7f00000009c0)='syzkaller\x00', 0x9, 0x20, &(0x7f0000000a00)=""/32, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[r3, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0x1, r9, r1, r11], &(0x7f0000000c80)=[{0x4, 0x2, 0x9, 0x5}, {0x4, 0x2, 0xf, 0x1}], 0x10, 0x6}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r14 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0xc001) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x17, &(0x7f00000008c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @generic={0x20, 0xd, 0x5, 0x52, 0xff}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9717}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x7, 0x8000000000000001, 0x4}, @generic={0x3f, 0xa, 0x5, 0x1, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000340)='GPL\x00', 0x1, 0xc5, &(0x7f00000004c0)=""/197, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xa, 0x1, 0x6}, 0x10, r4, r0, 0x6, &(0x7f0000000680)=[r5, r14], &(0x7f00000006c0)=[{0x2, 0x2, 0xd, 0x7}, {0x4, 0x5, 0x1, 0xc}, {0x7fffffff, 0x5, 0x7, 0x2}, {0x5, 0x1, 0x3, 0x2}, {0x5, 0x3, 0x8, 0xc}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0x4}, 0x90) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r17, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r18 = dup(r17) write$FUSE_DIRENTPLUS(r18, &(0x7f0000000d80)=ANY=[@ANYBLOB="e816aac9a87df19a0461dedb4351264eaa3b3e7eb924ab8a746be6b3a1f9e5b1f99cca967aef5a2d9bc56235d4480dd3527987b33513d830648f96c01dcf5d6bffb17d91e1818d557da824ed7a4ddf5ea7548405f7e654e5fbc893ff6e7eb7a3a1ac01c35ba11bbe540f92a6bbad261ab800e5ecb8f1b6ee63b7c4dee90bbdde0aba38232fc49cbe9e090ebc72abb2f156a10a4e285bbeeb7b04769a2a8081a773bb6f4458ad073897c5deed7a368123f572f19f1a0bf4fa0681139a8d612a974b22fd"], 0xa8) (async) write$FUSE_DIRENTPLUS(r18, &(0x7f0000000d80)=ANY=[@ANYBLOB="e816aac9a87df19a0461dedb4351264eaa3b3e7eb924ab8a746be6b3a1f9e5b1f99cca967aef5a2d9bc56235d4480dd3527987b33513d830648f96c01dcf5d6bffb17d91e1818d557da824ed7a4ddf5ea7548405f7e654e5fbc893ff6e7eb7a3a1ac01c35ba11bbe540f92a6bbad261ab800e5ecb8f1b6ee63b7c4dee90bbdde0aba38232fc49cbe9e090ebc72abb2f156a10a4e285bbeeb7b04769a2a8081a773bb6f4458ad073897c5deed7a368123f572f19f1a0bf4fa0681139a8d612a974b22fd"], 0xa8) write$FUSE_CREATE_OPEN(r18, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xf11f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}, 0xa0) poll(&(0x7f00000000c0)=[{r3, 0x4}, {r15, 0x4004}, {r6, 0x8181}, {r12, 0x5034}], 0x4, 0x5c62) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r17}, 0x2c, {[{@access_any}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r16}, 0x2c, {'wfdno', 0x3d, r17}, 0x2c, {[{@access_any}]}}) [ 2594.860239][T11680] FAULT_INJECTION: forcing a failure. [ 2594.860239][T11680] name failslab, interval 1, probability 0, space 0, times 0 [ 2594.872740][T11680] CPU: 0 PID: 11680 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2594.882817][T11680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2594.892697][T11680] Call Trace: [ 2594.895840][T11680] dump_stack_lvl+0x1e2/0x24b [ 2594.900350][T11680] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2594.905645][T11680] dump_stack+0x15/0x17 [ 2594.909637][T11680] should_fail+0x3c6/0x510 [ 2594.913886][T11680] ? vm_area_dup+0x26/0x270 [ 2594.918223][T11680] __should_failslab+0xa4/0xe0 [ 2594.922823][T11680] should_failslab+0x9/0x20 [ 2594.927163][T11680] kmem_cache_alloc+0x3d/0x2e0 [ 2594.931764][T11680] vm_area_dup+0x26/0x270 [ 2594.936971][T11680] copy_mm+0x8ac/0x13a0 [ 2594.940966][T11680] ? copy_signal+0x610/0x610 [ 2594.945386][T11680] ? __init_rwsem+0xd6/0x1c0 [ 2594.949807][T11680] ? copy_signal+0x4e3/0x610 [ 2594.954229][T11680] copy_process+0x1175/0x3340 [ 2594.958746][T11680] ? __sched_text_start+0x8/0x8 [ 2594.963433][T11680] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2594.968385][T11680] ? copy_clone_args_from_user+0x744/0x830 [ 2594.974018][T11680] kernel_clone+0x21e/0x9e0 [ 2594.978356][T11680] ? __delayed_free_task+0x20/0x20 [ 2594.983305][T11680] ? create_io_thread+0x1e0/0x1e0 [ 2594.988168][T11680] ? __x64_sys_clone3+0x88/0x3a0 [ 2594.992940][T11680] __x64_sys_clone3+0x376/0x3a0 [ 2594.997628][T11680] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2595.002658][T11680] ? __ia32_sys_clone+0x290/0x290 [ 2595.007527][T11680] ? __kasan_check_read+0x11/0x20 [ 2595.012409][T11680] do_syscall_64+0x34/0x70 [ 2595.016650][T11680] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2595.022362][T11680] RIP: 0033:0x7fe73cec4ba9 [ 2595.026620][T11680] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2595.046061][T11680] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2595.054301][T11680] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2595.062110][T11680] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2595.069932][T11680] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2595.077744][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2595.085554][T11680] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='br_fdb_update\x00', r3}, 0x10) (async) dup(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) umount2(&(0x7f0000000040)='./file0\x00', 0x9) 17:30:56 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x110, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000800)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) dup(r2) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) r5 = syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x1800002, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}, 0x0, 0x0, &(0x7f0000000600)="9d550ac737c7ee2f516e69a02de09d2ba8189e2a5d213a56deaf74bbaaf43f3e23e22e6fe3ab45a3220b9265f5aa08504cfc46a382c23943daf844f8f842be1df318d4b4a2f8511078eddc32a5bb24993ec7894f5126663b9cae9f97a20dd41737445034ae894b7263195842311b18fa7b466d0760a3980632182d79088c8d4c09c6f49cc90c8298b36217be982aaf62ae87912ff2dbb7f4bb3f72d18d3a8d811d7d427129617449971e2800c80738e5e677fbf720a2773cce") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1ac08a, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '\x00'}}, {@cache_loose}, {@access_uid={'access', 0x3d, r6}}], [{@obj_type={'obj_type', 0x3d, 'tracefs\x00'}}, {@dont_measure}]}}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x62, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) [ 2595.392108][T11694] fuse: Unknown parameter 'fowner>18446744073709551615' 17:30:56 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xb000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="d60e135a2c19c17ca2b688e9623b35680ad966de46d2294fcc0ca523aab8e691e8fbc0be0af8fa6d2ab686d17c4fe318138c93ea4aa8199297f10ae26c4cb480107f3ed51a347d41b28a0371fe1e6572a201fdbc9432a389c33a6a3aad192717e7e6eacb8faef8d0ed6116ae49fa88dee903a0f389dae1b4fa3d3a39fafcee5739f2131a736bc093fc90be1263070bc73a48fdbb8d74786d0e0e44e598b78356b1a7dc812ca06585277386ac7d949f84b6d91caea81456ee2798250f934873e2bdd45d083383be3de031fb9fb7279ece5366a2cbd873c3cd8a9fecf401f8b8a0332d9ea02efb178648ca52c3b3b127dd7e0014faf1070332ca6866", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) 17:30:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000800)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) dup(r2) (async) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) (async) r5 = syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x1800002, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}, 0x0, 0x0, &(0x7f0000000600)="9d550ac737c7ee2f516e69a02de09d2ba8189e2a5d213a56deaf74bbaaf43f3e23e22e6fe3ab45a3220b9265f5aa08504cfc46a382c23943daf844f8f842be1df318d4b4a2f8511078eddc32a5bb24993ec7894f5126663b9cae9f97a20dd41737445034ae894b7263195842311b18fa7b466d0760a3980632182d79088c8d4c09c6f49cc90c8298b36217be982aaf62ae87912ff2dbb7f4bb3f72d18d3a8d811d7d427129617449971e2800c80738e5e677fbf720a2773cce") (async, rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1ac08a, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '\x00'}}, {@cache_loose}, {@access_uid={'access', 0x3d, r6}}], [{@obj_type={'obj_type', 0x3d, 'tracefs\x00'}}, {@dont_measure}]}}) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x62, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='br_fdb_update\x00', r3}, 0x10) dup(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) umount2(&(0x7f0000000040)='./file0\x00', 0x9) 17:30:56 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x110, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/spi_master', 0x20040, 0x0) r3 = dup(r2) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = fsmount(r3, 0x0, 0x78) fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), 0x2000010, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@version_L}, {@cache_mmap}, {@nodevmap}, {@access_any}], [{@appraise_type}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}]}}) r8 = dup(r5) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2595.612956][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2595.678257][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2595.710038][T11720] FAULT_INJECTION: forcing a failure. [ 2595.710038][T11720] name failslab, interval 1, probability 0, space 0, times 0 [ 2595.722466][T11720] CPU: 1 PID: 11720 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2595.732600][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2595.742485][T11720] Call Trace: [ 2595.745624][T11720] dump_stack_lvl+0x1e2/0x24b [ 2595.750128][T11720] ? panic+0x80b/0x80b [ 2595.754117][T11720] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2595.759592][T11720] dump_stack+0x15/0x17 [ 2595.763582][T11720] should_fail+0x3c6/0x510 [ 2595.767832][T11720] ? anon_vma_fork+0x1df/0x4e0 [ 2595.772431][T11720] __should_failslab+0xa4/0xe0 [ 2595.777032][T11720] should_failslab+0x9/0x20 [ 2595.778324][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2595.781372][T11720] kmem_cache_alloc+0x3d/0x2e0 [ 2595.781385][T11720] ? anon_vma_fork+0xf7/0x4e0 [ 2595.781395][T11720] anon_vma_fork+0x1df/0x4e0 [ 2595.781414][T11720] copy_mm+0x95a/0x13a0 [ 2595.793894][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2595.797263][T11720] ? copy_signal+0x610/0x610 [ 2595.797278][T11720] ? __init_rwsem+0xd6/0x1c0 [ 2595.797296][T11720] ? copy_signal+0x4e3/0x610 [ 2595.813955][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2595.816867][T11720] copy_process+0x1175/0x3340 [ 2595.816888][T11720] ? memset+0x35/0x40 [ 2595.816904][T11720] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2595.845774][T11720] ? copy_clone_args_from_user+0x744/0x830 [ 2595.851404][T11720] kernel_clone+0x21e/0x9e0 [ 2595.855742][T11720] ? __delayed_free_task+0x20/0x20 [ 2595.860689][T11720] ? create_io_thread+0x1e0/0x1e0 [ 2595.865554][T11720] __x64_sys_clone3+0x376/0x3a0 [ 2595.870238][T11720] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2595.875270][T11720] ? __ia32_sys_clone+0x290/0x290 [ 2595.880150][T11720] ? __kasan_check_read+0x11/0x20 [ 2595.884994][T11720] do_syscall_64+0x34/0x70 [ 2595.889246][T11720] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2595.894970][T11720] RIP: 0033:0x7fe73cec4ba9 [ 2595.899226][T11720] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2595.918665][T11720] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2595.926921][T11720] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2595.934733][T11720] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2595.942548][T11720] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2595.950354][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2595.958158][T11720] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 [ 2596.022981][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.068120][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.127987][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.143038][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.150098][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.157038][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.163925][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.170856][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' 17:30:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/spi_master', 0x20040, 0x0) r3 = dup(r2) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x10) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r6 = fsmount(r3, 0x0, 0x78) (async) fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), 0x2000010, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@version_L}, {@cache_mmap}, {@nodevmap}, {@access_any}], [{@appraise_type}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}]}}) (async) r8 = dup(r5) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 17:30:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/spi_master', 0x20040, 0x0) r3 = dup(r2) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = fsmount(r3, 0x0, 0x78) (async) fstat(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), 0x2000010, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@fscache}, {@version_L}, {@cache_mmap}, {@nodevmap}, {@access_any}], [{@appraise_type}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}]}}) (async) r8 = dup(r5) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2596.177784][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.188886][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.195938][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.206024][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.216403][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' 17:30:57 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x108, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041285, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x40, 0x22}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="f0"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f00000004c0)="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", 0xfe, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 2596.223475][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.233814][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.241629][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.252767][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.262090][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.269028][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' 17:30:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041285, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x40, 0x22}, 0x18) (async, rerun: 32) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="f0"], 0xa8) (async, rerun: 32) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f00000004c0)="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", 0xfe, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (rerun: 32) [ 2596.284077][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.298185][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.318230][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' 17:30:57 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x1f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2596.329331][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.341030][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.356252][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.373235][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.384657][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.398145][T11712] fuse: Unknown parameter 'fowner>18446744073709551615' 17:30:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 17:30:57 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041285, &(0x7f0000000000)) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x40, 0x22}, 0x18) (async, rerun: 64) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="f0"], 0xa8) (rerun: 64) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f00000004c0)="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", 0xfe, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:30:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000800)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) dup(r2) (async) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) (async) r5 = syz_mount_image$fuse(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x1800002, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}, 0x0, 0x0, &(0x7f0000000600)="9d550ac737c7ee2f516e69a02de09d2ba8189e2a5d213a56deaf74bbaaf43f3e23e22e6fe3ab45a3220b9265f5aa08504cfc46a382c23943daf844f8f842be1df318d4b4a2f8511078eddc32a5bb24993ec7894f5126663b9cae9f97a20dd41737445034ae894b7263195842311b18fa7b466d0760a3980632182d79088c8d4c09c6f49cc90c8298b36217be982aaf62ae87912ff2dbb7f4bb3f72d18d3a8d811d7d427129617449971e2800c80738e5e677fbf720a2773cce") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1ac08a, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '\x00'}}, {@cache_loose}, {@access_uid={'access', 0x3d, r6}}], [{@obj_type={'obj_type', 0x3d, 'tracefs\x00'}}, {@dont_measure}]}}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r2}, 0x8) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x62, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:57 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x108, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) read$FUSE(r2, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, r3, {{0x1, 0x0, 0x8000000, 0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}}}}, 0xa0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='gpu_mem_total\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) [ 2596.471891][T11757] fuse: Unknown parameter 'fowner>18446744073709551615' [ 2596.568545][T11764] FAULT_INJECTION: forcing a failure. [ 2596.568545][T11764] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.581036][T11764] CPU: 1 PID: 11764 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2596.591157][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2596.601003][T11764] Call Trace: [ 2596.604139][T11764] dump_stack_lvl+0x1e2/0x24b [ 2596.608652][T11764] ? panic+0x80b/0x80b [ 2596.612554][T11764] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2596.617849][T11764] ? irqentry_exit+0x4f/0x60 [ 2596.622274][T11764] ? sysvec_reschedule_ipi+0x83/0x160 [ 2596.627484][T11764] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2596.633731][T11764] dump_stack+0x15/0x17 [ 2596.637726][T11764] should_fail+0x3c6/0x510 [ 2596.641975][T11764] ? anon_vma_fork+0xf7/0x4e0 [ 2596.646497][T11764] __should_failslab+0xa4/0xe0 [ 2596.651081][T11764] should_failslab+0x9/0x20 [ 2596.655418][T11764] kmem_cache_alloc+0x3d/0x2e0 [ 2596.660027][T11764] anon_vma_fork+0xf7/0x4e0 [ 2596.664359][T11764] ? anon_vma_name+0x4c/0x70 [ 2596.668792][T11764] ? vm_area_dup+0x1a1/0x270 [ 2596.673210][T11764] copy_mm+0x95a/0x13a0 [ 2596.677203][T11764] ? copy_signal+0x610/0x610 [ 2596.681633][T11764] ? __init_rwsem+0xd6/0x1c0 [ 2596.686056][T11764] ? copy_signal+0x4e3/0x610 [ 2596.690481][T11764] copy_process+0x1175/0x3340 [ 2596.694997][T11764] ? memset+0x35/0x40 [ 2596.698815][T11764] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2596.703760][T11764] ? copy_clone_args_from_user+0x744/0x830 [ 2596.709404][T11764] kernel_clone+0x21e/0x9e0 [ 2596.713742][T11764] ? __delayed_free_task+0x20/0x20 [ 2596.718694][T11764] ? create_io_thread+0x1e0/0x1e0 [ 2596.723551][T11764] ? kernel_write+0x3d0/0x3d0 [ 2596.728062][T11764] __x64_sys_clone3+0x376/0x3a0 [ 2596.732845][T11764] ? __ia32_sys_clone+0x290/0x290 [ 2596.737702][T11764] ? ksys_write+0x260/0x2c0 [ 2596.742050][T11764] ? debug_smp_processor_id+0x17/0x20 [ 2596.747244][T11764] do_syscall_64+0x34/0x70 [ 2596.751498][T11764] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2596.757225][T11764] RIP: 0033:0x7fe73cec4ba9 [ 2596.761481][T11764] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2596.780920][T11764] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2596.789165][T11764] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2596.796971][T11764] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2596.804800][T11764] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2596.812600][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2596.820411][T11764] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xffffffffffffff66, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x400}}, {0x0, 0x4}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) read$FUSE(r2, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, r3, {{0x1, 0x0, 0x8000000, 0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}}}}, 0xa0) (async, rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='gpu_mem_total\x00', r4}, 0x10) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (rerun: 64) 17:30:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xffffffffffffff66, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x400}}, {0x0, 0x4}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xffffffffffffff66, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x400}}, {0x0, 0x4}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) 17:30:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xffffffffffffff66, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x400}}, {0x0, 0x4}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) read$FUSE(r2, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, r3, {{0x1, 0x0, 0x8000000, 0x6, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}}}}, 0xa0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='gpu_mem_total\x00', r4}, 0x10) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:58 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x1ffff000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 17:30:58 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x108, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xa8) r4 = openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x1c080, 0x20) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) write$P9_RGETLOCK(r4, &(0x7f0000000080)={0x23, 0x37, 0x2, {0x1, 0x0, 0xf4, r5, 0x5, '\\!\')&'}}, 0x23) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2597.423275][T11804] FAULT_INJECTION: forcing a failure. [ 2597.423275][T11804] name failslab, interval 1, probability 0, space 0, times 0 [ 2597.435715][T11804] CPU: 1 PID: 11804 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2597.445837][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2597.455726][T11804] Call Trace: [ 2597.458873][T11804] dump_stack_lvl+0x1e2/0x24b [ 2597.463372][T11804] ? panic+0x80b/0x80b [ 2597.467287][T11804] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2597.472572][T11804] dump_stack+0x15/0x17 [ 2597.476563][T11804] should_fail+0x3c6/0x510 [ 2597.480818][T11804] ? anon_vma_fork+0x1df/0x4e0 [ 2597.485418][T11804] __should_failslab+0xa4/0xe0 [ 2597.490021][T11804] should_failslab+0x9/0x20 [ 2597.494359][T11804] kmem_cache_alloc+0x3d/0x2e0 [ 2597.498962][T11804] ? anon_vma_fork+0xf7/0x4e0 [ 2597.503467][T11804] anon_vma_fork+0x1df/0x4e0 [ 2597.507895][T11804] copy_mm+0x95a/0x13a0 [ 2597.511898][T11804] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2597.517361][T11804] ? copy_signal+0x610/0x610 [ 2597.521782][T11804] ? __init_rwsem+0xd6/0x1c0 [ 2597.526217][T11804] ? copy_signal+0x4e3/0x610 [ 2597.530633][T11804] copy_process+0x1175/0x3340 [ 2597.535156][T11804] ? should_fail_usercopy+0x9/0x20 [ 2597.540091][T11804] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2597.545040][T11804] ? copy_clone_args_from_user+0x744/0x830 [ 2597.550676][T11804] kernel_clone+0x21e/0x9e0 [ 2597.555016][T11804] ? __delayed_free_task+0x20/0x20 [ 2597.559961][T11804] ? create_io_thread+0x1e0/0x1e0 [ 2597.564832][T11804] ? __this_cpu_preempt_check+0x13/0x20 [ 2597.570202][T11804] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2597.576712][T11804] __x64_sys_clone3+0x376/0x3a0 [ 2597.581398][T11804] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2597.586429][T11804] ? __ia32_sys_clone+0x290/0x290 [ 2597.591300][T11804] ? __kasan_check_read+0x11/0x20 [ 2597.596156][T11804] do_syscall_64+0x34/0x70 [ 2597.600407][T11804] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2597.606132][T11804] RIP: 0033:0x7fe73cec4ba9 [ 2597.610387][T11804] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2597.629825][T11804] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2597.638071][T11804] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2597.645880][T11804] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2597.653705][T11804] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2597.661504][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2597.669322][T11804] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:30:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xa8) (async) r4 = openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x1c080, 0x20) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) write$P9_RGETLOCK(r4, &(0x7f0000000080)={0x23, 0x37, 0x2, {0x1, 0x0, 0xf4, r5, 0x5, '\\!\')&'}}, 0x23) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:59 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x100, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000040)=ANY=[], 0xa8) (async) r4 = openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x1c080, 0x20) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) write$P9_RGETLOCK(r4, &(0x7f0000000080)={0x23, 0x37, 0x2, {0x1, 0x0, 0xf4, r5, 0x5, '\\!\')&'}}, 0x23) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:30:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RREADDIR(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="49000000290100a20400008000000000050000000000001421000000000040000207002e2f66696c653080010000000200000000000000ee7d0000000000000907002e2f66696c6530"], 0x49) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="387dce2ac7b79e91cb603c8d293056977881e4d5fe5d1696c2e0995f62e0047d947c771f17f6532005dc0b3948ae9918859f4a77e0b29d9f8be1dfaed6184da41f76236fac1959316c239b065a7f671672b0005155e3aa6dd08fe996d6ae3f29d0a2f260a6f22eedf5ca58ef0428e9466100d8715b4cf490c823859b8ed38f344a42d8f3baa0e3137a03abe3"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d9694f4c03080b9f132c508eb49c3ecb9a613ca3b12f57fb0ab7018509d78358bb6d7358f7cf1dfe6d0d73cd314fa8f3a204de46a5991", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x3b08420, &(0x7f0000000340)={[{@xino_auto}, {@index_off}, {@default_permissions}, {@metacopy_off}, {@xino_on}], [{@flag='async'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'kmem_cache_free\x00'}}, {@appraise_type}]}) 17:30:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (async) 17:30:59 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x2011000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@audit}]}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0xc000) r4 = signalfd4(r0, &(0x7f00000007c0)={[0x3f9c993b]}, 0x8, 0xc00) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) r7 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) r9 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x1000000201005) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0xffffffff, 0x6, 0xfff000, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x4}, 0x48) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/consoles\x00', 0x0, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/slabinfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x23, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x82c4}, @call={0x85, 0x0, 0x0, 0x5f}, @alu={0x7, 0x0, 0x7, 0x4, 0x8, 0x4, 0xfffffffffffffff0}, @generic={0x0, 0x4, 0xa, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x5, 0x4, 0x6, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000000700)='GPL\x00', 0x887b, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x5d0}, 0x10, 0x0, r4, 0x5, &(0x7f0000000940)=[0x1, r5, r7, r9, r11, 0xffffffffffffffff, r12, r13], &(0x7f0000000980)=[{0x1, 0x4, 0xb, 0x4}, {0x1, 0x5, 0xa, 0x9}, {0x2, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x3, 0xb}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x7f}, 0x90) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)={[{@nfs_export_off}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#)'}}]}) r14 = dup(r1) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r14, &(0x7f0000000400)={0xa0}, 0xa0) umount2(&(0x7f00000003c0)='./file1\x00', 0x11) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00\x00dno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) [ 2598.063246][T11826] 9pnet: Insufficient options for proto=fd 17:30:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 17:30:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RREADDIR(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="49000000290100a20400008000000000050000000000001421000000000040000207002e2f66696c653080010000000200000000000000ee7d0000000000000907002e2f66696c6530"], 0x49) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="387dce2ac7b79e91cb603c8d293056977881e4d5fe5d1696c2e0995f62e0047d947c771f17f6532005dc0b3948ae9918859f4a77e0b29d9f8be1dfaed6184da41f76236fac1959316c239b065a7f671672b0005155e3aa6dd08fe996d6ae3f29d0a2f260a6f22eedf5ca58ef0428e9466100d8715b4cf490c823859b8ed38f344a42d8f3baa0e3137a03abe3"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d9694f4c03080b9f132c508eb49c3ecb9a613ca3b12f57fb0ab7018509d78358bb6d7358f7cf1dfe6d0d73cd314fa8f3a204de46a5991", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x3b08420, &(0x7f0000000340)={[{@xino_auto}, {@index_off}, {@default_permissions}, {@metacopy_off}, {@xino_on}], [{@flag='async'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'kmem_cache_free\x00'}}, {@appraise_type}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$P9_RREADDIR(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="49000000290100a20400008000000000050000000000001421000000000040000207002e2f66696c653080010000000200000000000000ee7d0000000000000907002e2f66696c6530"], 0x49) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="387dce2ac7b79e91cb603c8d293056977881e4d5fe5d1696c2e0995f62e0047d947c771f17f6532005dc0b3948ae9918859f4a77e0b29d9f8be1dfaed6184da41f76236fac1959316c239b065a7f671672b0005155e3aa6dd08fe996d6ae3f29d0a2f260a6f22eedf5ca58ef0428e9466100d8715b4cf490c823859b8ed38f344a42d8f3baa0e3137a03abe3"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d9694f4c03080b9f132c508eb49c3ecb9a613ca3b12f57fb0ab7018509d78358bb6d7358f7cf1dfe6d0d73cd314fa8f3a204de46a5991", @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x3b08420, &(0x7f0000000340)={[{@xino_auto}, {@index_off}, {@default_permissions}, {@metacopy_off}, {@xino_on}], [{@flag='async'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'kmem_cache_free\x00'}}, {@appraise_type}]}) (async) 17:30:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e0993869917480f07c74ec33ba81a36e39a6613d46df6a6e491fa0248617cb139387ba8cca80ccbff784c08b09160e85a00e5377587af0", 0xd2}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:59 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x100, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:30:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RREADDIR(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="49000000290100a20400008000000000050000000000001421000000000040000207002e2f66696c653080010000000200000000000000ee7d0000000000000907002e2f66696c6530"], 0x49) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="387dce2ac7b79e91cb603c8d293056977881e4d5fe5d1696c2e0995f62e0047d947c771f17f6532005dc0b3948ae9918859f4a77e0b29d9f8be1dfaed6184da41f76236fac1959316c239b065a7f671672b0005155e3aa6dd08fe996d6ae3f29d0a2f260a6f22eedf5ca58ef0428e9466100d8715b4cf490c823859b8ed38f344a42d8f3baa0e3137a03abe3"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d9694f4c03080b9f132c508eb49c3ecb9a613ca3b12f57fb0ab7018509d78358bb6d7358f7cf1dfe6d0d73cd314fa8f3a204de46a5991", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x3b08420, &(0x7f0000000340)={[{@xino_auto}, {@index_off}, {@default_permissions}, {@metacopy_off}, {@xino_on}], [{@flag='async'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'kmem_cache_free\x00'}}, {@appraise_type}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$P9_RREADDIR(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="49000000290100a20400008000000000050000000000001421000000000040000207002e2f66696c653080010000000200000000000000ee7d0000000000000907002e2f66696c6530"], 0x49) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="387dce2ac7b79e91cb603c8d293056977881e4d5fe5d1696c2e0995f62e0047d947c771f17f6532005dc0b3948ae9918859f4a77e0b29d9f8be1dfaed6184da41f76236fac1959316c239b065a7f671672b0005155e3aa6dd08fe996d6ae3f29d0a2f260a6f22eedf5ca58ef0428e9466100d8715b4cf490c823859b8ed38f344a42d8f3baa0e3137a03abe3"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d9694f4c03080b9f132c508eb49c3ecb9a613ca3b12f57fb0ab7018509d78358bb6d7358f7cf1dfe6d0d73cd314fa8f3a204de46a5991", @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x3b08420, &(0x7f0000000340)={[{@xino_auto}, {@index_off}, {@default_permissions}, {@metacopy_off}, {@xino_on}], [{@flag='async'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsdef}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'kmem_cache_free\x00'}}, {@appraise_type}]}) (async) [ 2598.168695][T11843] 9pnet: Insufficient options for proto=fd [ 2598.177990][T11840] overlayfs: unrecognized mount option "fsmagic=0x0000000000000001" or missing value [ 2598.218836][T11840] 9pnet: Insufficient options for proto=fd [ 2598.224662][T11858] 9pnet: Insufficient options for proto=fd [ 2598.287663][T11861] FAULT_INJECTION: forcing a failure. [ 2598.287663][T11861] name failslab, interval 1, probability 0, space 0, times 0 [ 2598.300123][T11861] CPU: 1 PID: 11861 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2598.310224][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2598.320108][T11861] Call Trace: [ 2598.323243][T11861] dump_stack_lvl+0x1e2/0x24b [ 2598.327748][T11861] ? panic+0x80b/0x80b [ 2598.331659][T11861] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2598.336973][T11861] dump_stack+0x15/0x17 [ 2598.340960][T11861] should_fail+0x3c6/0x510 [ 2598.345216][T11861] ? anon_vma_fork+0x1df/0x4e0 [ 2598.349801][T11861] __should_failslab+0xa4/0xe0 [ 2598.354397][T11861] should_failslab+0x9/0x20 [ 2598.358738][T11861] kmem_cache_alloc+0x3d/0x2e0 [ 2598.363359][T11861] ? anon_vma_fork+0xf7/0x4e0 [ 2598.367848][T11861] anon_vma_fork+0x1df/0x4e0 [ 2598.372293][T11861] copy_mm+0x95a/0x13a0 [ 2598.376273][T11861] ? copy_signal+0x399/0x610 [ 2598.380697][T11861] ? copy_signal+0x610/0x610 [ 2598.385123][T11861] ? __init_rwsem+0xd6/0x1c0 [ 2598.389549][T11861] ? copy_signal+0x4e3/0x610 [ 2598.393974][T11861] copy_process+0x1175/0x3340 [ 2598.398493][T11861] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2598.403436][T11861] ? copy_clone_args_from_user+0x744/0x830 [ 2598.409078][T11861] kernel_clone+0x21e/0x9e0 [ 2598.413413][T11861] ? __delayed_free_task+0x20/0x20 [ 2598.418361][T11861] ? create_io_thread+0x1e0/0x1e0 [ 2598.423223][T11861] ? __this_cpu_preempt_check+0x13/0x20 [ 2598.428601][T11861] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2598.435114][T11861] __x64_sys_clone3+0x376/0x3a0 [ 2598.439798][T11861] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2598.444832][T11861] ? __ia32_sys_clone+0x290/0x290 [ 2598.449700][T11861] ? __kasan_check_read+0x11/0x20 [ 2598.454555][T11861] do_syscall_64+0x34/0x70 [ 2598.458807][T11861] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2598.464530][T11861] RIP: 0033:0x7fe73cec4ba9 [ 2598.468788][T11861] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2598.488226][T11861] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2598.496471][T11861] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2598.504282][T11861] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2598.512094][T11861] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2598.519903][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2598.527714][T11861] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:30:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r1, 0x1ff, 0x1, 0x4}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2100080, &(0x7f00000004c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}}, 0x0, 0x0, &(0x7f0000000340)="e7be456746925fbb6298a008de568f683a0f28522d236d7f191ab705f080660f2835dc0bbadffc4d809787c903") write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r3) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:30:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x2011000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@audit}]}) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0xc000) r4 = signalfd4(r0, &(0x7f00000007c0)={[0x3f9c993b]}, 0x8, 0xc00) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r7 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) (async) sendfile(r7, r8, 0x0, 0x1000000201005) r9 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x1000000201005) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0xffffffff, 0x6, 0xfff000, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x4}, 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0xffffffff, 0x6, 0xfff000, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x4}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/consoles\x00', 0x0, 0x0) (async) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/consoles\x00', 0x0, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/slabinfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x23, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x82c4}, @call={0x85, 0x0, 0x0, 0x5f}, @alu={0x7, 0x0, 0x7, 0x4, 0x8, 0x4, 0xfffffffffffffff0}, @generic={0x0, 0x4, 0xa, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x5, 0x4, 0x6, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000000700)='GPL\x00', 0x887b, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x5d0}, 0x10, 0x0, r4, 0x5, &(0x7f0000000940)=[0x1, r5, r7, r9, r11, 0xffffffffffffffff, r12, r13], &(0x7f0000000980)=[{0x1, 0x4, 0xb, 0x4}, {0x1, 0x5, 0xa, 0x9}, {0x2, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x3, 0xb}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x7f}, 0x90) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)={[{@nfs_export_off}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#)'}}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)={[{@nfs_export_off}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#)'}}]}) r14 = dup(r1) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r14, &(0x7f0000000400)={0xa0}, 0xa0) umount2(&(0x7f00000003c0)='./file1\x00', 0x11) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00\x00dno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) 17:30:59 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x100, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2598.778619][T11875] overlayfs: unrecognized mount option "fsmagic=0x0000000000000001" or missing value [ 2598.801545][T11876] overlayfs: unrecognized mount option "fsmagic=0x0000000000000001" or missing value 17:30:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r1, 0x1ff, 0x1, 0x4}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2100080, &(0x7f00000004c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}}, 0x0, 0x0, &(0x7f0000000340)="e7be456746925fbb6298a008de568f683a0f28522d236d7f191ab705f080660f2835dc0bbadffc4d809787c903") (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r5 = dup(r3) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:30:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x2011000, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@audit}]}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) pipe2(&(0x7f0000000580), 0xc000) (async) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0xc000) signalfd4(r0, &(0x7f00000007c0)={[0x3f9c993b]}, 0x8, 0xc00) (async) r4 = signalfd4(r0, &(0x7f00000007c0)={[0x3f9c993b]}, 0x8, 0xc00) r5 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201006) open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r7 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) (async) sendfile(r7, r8, 0x0, 0x1000000201005) open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r9 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x1000000201005) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0xffffffff, 0x6, 0xfff000, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x4}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/consoles\x00', 0x0, 0x0) (async) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/consoles\x00', 0x0, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/slabinfo\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0x23, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x82c4}, @call={0x85, 0x0, 0x0, 0x5f}, @alu={0x7, 0x0, 0x7, 0x4, 0x8, 0x4, 0xfffffffffffffff0}, @generic={0x0, 0x4, 0xa, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x5, 0x4, 0x6, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000000700)='GPL\x00', 0x887b, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x2, 0x0, 0x5d0}, 0x10, 0x0, r4, 0x5, &(0x7f0000000940)=[0x1, r5, r7, r9, r11, 0xffffffffffffffff, r12, r13], &(0x7f0000000980)=[{0x1, 0x4, 0xb, 0x4}, {0x1, 0x5, 0xa, 0x9}, {0x2, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x3, 0xb}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x7f}, 0x90) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)={[{@nfs_export_off}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#)'}}]}) dup(r1) (async) r14 = dup(r1) write$FUSE_DIRENTPLUS(r14, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r14, &(0x7f0000000400)={0xa0}, 0xa0) umount2(&(0x7f00000003c0)='./file1\x00', 0x11) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00\x00dno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) [ 2598.827508][T11875] 9pnet: Insufficient options for proto=fd 17:31:00 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c1f0000006f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) [ 2598.898349][T11883] overlayfs: unrecognized mount option "fsmagic=0x0000000000000001" or missing value [ 2598.910963][T11882] 9pnet: Insufficient options for proto=fd [ 2598.952892][T11890] 9pnet: Insufficient options for proto=fd 17:31:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 17:31:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c1f0000006f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c1f0000006f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) (async) 17:31:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="d60e135a2c19c17ca2b688e9623b35680ad966de46d2294fcc0ca523aab8e691e8fbc0be0af8fa6d2ab686d17c4fe318138c93ea4aa8199297f10ae26c4cb480107f3ed51a347d41b28a0371fe1e6572a201fdbc9432a389c33a6a3aad192717e7e6eacb8faef8d0ed6116ae49fa88dee903a0f389dae1b4fa3d3a39fafcee5739f2131a736bc093fc90be1263070bc73a48fdbb8d74786d0e0e44e598b78356b1a7dc812ca06585277386ac7d949f84b6d91caea81456ee2798250f934873e2bdd45d083383be3de031fb9fb7279ece5366a2cbd873c3cd8a9fecf401f8b8a0332d9ea02efb178648ca52c3b3b127dd7e0014faf1070332ca6866", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}], 0x1, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:00 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x100, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r1, 0x1ff, 0x1, 0x4}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2100080, &(0x7f00000004c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0x5}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}}, 0x0, 0x0, &(0x7f0000000340)="e7be456746925fbb6298a008de568f683a0f28522d236d7f191ab705f080660f2835dc0bbadffc4d809787c903") (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r5 = dup(r3) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:31:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c1f0000006f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) [ 2599.031619][T11899] 9pnet: Insufficient options for proto=fd [ 2599.073059][T11914] 9pnet: Insufficient options for proto=fd [ 2599.136516][T11920] FAULT_INJECTION: forcing a failure. [ 2599.136516][T11920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2599.149741][T11920] CPU: 1 PID: 11920 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2599.159767][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2599.169655][T11920] Call Trace: [ 2599.172791][T11920] dump_stack_lvl+0x1e2/0x24b [ 2599.177299][T11920] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2599.182596][T11920] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2599.189099][T11920] dump_stack+0x15/0x17 [ 2599.193094][T11920] should_fail+0x3c6/0x510 [ 2599.197346][T11920] should_fail_alloc_page+0x52/0x60 [ 2599.202379][T11920] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2599.207592][T11920] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2599.212972][T11920] ? preempt_schedule_notrace+0x140/0x140 [ 2599.218521][T11920] ? irqentry_exit+0x4f/0x60 [ 2599.222946][T11920] ? sysvec_reschedule_ipi+0x83/0x160 [ 2599.228158][T11920] get_zeroed_page+0x19/0x40 [ 2599.232584][T11920] __pud_alloc+0x8b/0x260 [ 2599.236749][T11920] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2599.242218][T11920] ? handle_mm_fault+0x1a10/0x1a10 [ 2599.247162][T11920] ? copy_page_range+0x6b5/0x3020 [ 2599.252024][T11920] copy_page_range+0x2cd6/0x3020 [ 2599.256799][T11920] ? kmem_cache_alloc+0x168/0x2e0 [ 2599.261655][T11920] ? anon_vma_fork+0x1df/0x4e0 [ 2599.266256][T11920] ? copy_process+0x1175/0x3340 [ 2599.270941][T11920] ? kernel_clone+0x21e/0x9e0 [ 2599.275459][T11920] ? do_syscall_64+0x34/0x70 [ 2599.279891][T11920] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2599.285790][T11920] ? pfn_valid+0x1c0/0x1c0 [ 2599.290040][T11920] ? __kasan_check_write+0x14/0x20 [ 2599.294983][T11920] ? _raw_write_lock+0xa4/0x170 [ 2599.299674][T11920] ? _raw_write_trylock+0x1a0/0x1a0 [ 2599.304707][T11920] ? _raw_write_unlock+0x2e/0x60 [ 2599.309479][T11920] copy_mm+0xc4a/0x13a0 [ 2599.313475][T11920] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2599.318941][T11920] ? copy_signal+0x610/0x610 [ 2599.323366][T11920] ? __init_rwsem+0xd6/0x1c0 [ 2599.327790][T11920] ? copy_signal+0x4e3/0x610 [ 2599.332217][T11920] copy_process+0x1175/0x3340 [ 2599.336736][T11920] ? __sched_text_start+0x8/0x8 [ 2599.341419][T11920] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2599.346365][T11920] ? preempt_schedule_irq+0xe7/0x140 [ 2599.351486][T11920] ? preempt_schedule_notrace+0x140/0x140 [ 2599.357040][T11920] ? copy_clone_args_from_user+0x744/0x830 [ 2599.362684][T11920] kernel_clone+0x21e/0x9e0 [ 2599.367023][T11920] ? irqentry_exit+0x4f/0x60 [ 2599.371452][T11920] ? create_io_thread+0x1e0/0x1e0 [ 2599.376307][T11920] ? __x64_sys_clone3+0x1a6/0x3a0 [ 2599.381172][T11920] __x64_sys_clone3+0x376/0x3a0 [ 2599.385855][T11920] ? __ia32_sys_clone+0x290/0x290 [ 2599.390729][T11920] ? __kasan_check_read+0x11/0x20 [ 2599.395586][T11920] do_syscall_64+0x34/0x70 [ 2599.399833][T11920] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2599.405556][T11920] RIP: 0033:0x7fe73cec4ba9 [ 2599.409816][T11920] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2599.429251][T11920] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2599.437494][T11920] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2599.445305][T11920] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2599.453131][T11920] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2599.460931][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2599.468746][T11920] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006000)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x5}, 0x1}, {{&(0x7f0000000580)=@rc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000700)=""/199, 0xc7}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000800)=""/18, 0x12}, {&(0x7f0000000840)=""/3, 0x3}, {&(0x7f00000038c0)=""/213, 0xd5}, {&(0x7f00000039c0)=""/97, 0x61}], 0x4}, 0x10000}, {{&(0x7f0000003a80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/253, 0xfd}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/226, 0xe2}], 0x4, &(0x7f0000005d40)=""/245, 0xf5}, 0x83ce}, {{&(0x7f0000005e40)=@ax25={{0x3, @netrom}, [@null, @rose, @remote, @default, @bcast, @rose, @rose, @default]}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005ec0)}, {&(0x7f0000005f00)=""/39, 0x27}], 0x2, &(0x7f0000005f80)=""/128, 0x80}}], 0x5, 0x40000000, &(0x7f0000006140)={0x77359400}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:00 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006000)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x5}, 0x1}, {{&(0x7f0000000580)=@rc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000700)=""/199, 0xc7}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000800)=""/18, 0x12}, {&(0x7f0000000840)=""/3, 0x3}, {&(0x7f00000038c0)=""/213, 0xd5}, {&(0x7f00000039c0)=""/97, 0x61}], 0x4}, 0x10000}, {{&(0x7f0000003a80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/253, 0xfd}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/226, 0xe2}], 0x4, &(0x7f0000005d40)=""/245, 0xf5}, 0x83ce}, {{&(0x7f0000005e40)=@ax25={{0x3, @netrom}, [@null, @rose, @remote, @default, @bcast, @rose, @rose, @default]}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005ec0)}, {&(0x7f0000005f00)=""/39, 0x27}], 0x2, &(0x7f0000005f80)=""/128, 0x80}}], 0x5, 0x40000000, &(0x7f0000006140)={0x77359400}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77a68ff8", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 17:31:00 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77a68ff8", @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 2599.754490][T11933] 9pnet: Insufficient options for proto=fd 17:31:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) 17:31:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006000)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x5}, 0x1}, {{&(0x7f0000000580)=@rc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000700)=""/199, 0xc7}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000800)=""/18, 0x12}, {&(0x7f0000000840)=""/3, 0x3}, {&(0x7f00000038c0)=""/213, 0xd5}, {&(0x7f00000039c0)=""/97, 0x61}], 0x4}, 0x10000}, {{&(0x7f0000003a80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/253, 0xfd}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/226, 0xe2}], 0x4, &(0x7f0000005d40)=""/245, 0xf5}, 0x83ce}, {{&(0x7f0000005e40)=@ax25={{0x3, @netrom}, [@null, @rose, @remote, @default, @bcast, @rose, @rose, @default]}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005ec0)}, {&(0x7f0000005f00)=""/39, 0x27}], 0x2, &(0x7f0000005f80)=""/128, 0x80}}], 0x5, 0x40000000, &(0x7f0000006140)={0x77359400}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) [ 2599.821551][T11943] 9pnet: Insufficient options for proto=fd 17:31:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77a68ff8", @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77a68ff8", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 17:31:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}], 0x1, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:01 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2599.895494][T11954] 9pnet: Insufficient options for proto=fd [ 2599.907224][T11955] 9pnet: Insufficient options for proto=fd [ 2599.998437][T11961] FAULT_INJECTION: forcing a failure. [ 2599.998437][T11961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2600.011862][T11961] CPU: 1 PID: 11961 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2600.021989][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2600.031881][T11961] Call Trace: [ 2600.035016][T11961] dump_stack_lvl+0x1e2/0x24b [ 2600.039538][T11961] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2600.044821][T11961] dump_stack+0x15/0x17 [ 2600.048814][T11961] should_fail+0x3c6/0x510 [ 2600.053067][T11961] should_fail_alloc_page+0x52/0x60 [ 2600.058099][T11961] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2600.063310][T11961] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2600.068696][T11961] ? __kasan_check_write+0x14/0x20 [ 2600.073642][T11961] ? _raw_spin_lock+0xa4/0x1b0 [ 2600.078233][T11961] ? _raw_spin_trylock_bh+0x190/0x190 [ 2600.083449][T11961] __pmd_alloc+0x9c/0x410 [ 2600.087605][T11961] ? _raw_spin_unlock+0x4d/0x70 [ 2600.092296][T11961] ? __pud_alloc+0x213/0x260 17:31:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) sendto$inet(r4, &(0x7f00000004c0)="7fc23ea4740b6e3a840caf8dcd0121dbc9cf2bd4689dcd77762fb1b7f58a71ea1a42e5e4082fbd260d52d926557a4779d411d96a6e41bf8921cfd7c27813d82f84de6f95cd7c0b9b57d44035992b051c7999066c594653c1e810ff1534440d5ea5fb80fddcd906a706b955512b43f24822bb234f7c4f2361fd5ffc15dd41312f208892656a5964cf8416a3f0959e054602ea6141c9af42d644f47f6af7e655a319e95ef2af2faa4d5684f1c05f1fbcfd0a340a40baa2fdd80a4a0c86ccef37cf838fe927bb4166b0c1e49e97b593a89d7b6237dc7d537caaf147", 0xda, 0x4000801, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2600.096732][T11961] ? __pud_alloc+0x260/0x260 [ 2600.101152][T11961] ? __schedule+0xbee/0x1330 [ 2600.105576][T11961] copy_page_range+0x2c36/0x3020 [ 2600.110346][T11961] ? kmem_cache_alloc+0x168/0x2e0 [ 2600.115207][T11961] ? anon_vma_fork+0x1df/0x4e0 [ 2600.119808][T11961] ? copy_process+0x1175/0x3340 [ 2600.124497][T11961] ? kernel_clone+0x21e/0x9e0 [ 2600.129009][T11961] ? do_syscall_64+0x34/0x70 [ 2600.133433][T11961] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2600.139345][T11961] ? pfn_valid+0x1c0/0x1c0 [ 2600.143585][T11961] ? __kasan_check_write+0x14/0x20 [ 2600.148533][T11961] ? _raw_write_lock+0xa4/0x170 [ 2600.153223][T11961] ? _raw_write_trylock+0x1a0/0x1a0 [ 2600.158258][T11961] ? _raw_write_unlock+0x2e/0x60 [ 2600.163045][T11961] copy_mm+0xc4a/0x13a0 [ 2600.167026][T11961] ? copy_signal+0x610/0x610 [ 2600.171448][T11961] ? __init_rwsem+0xd6/0x1c0 [ 2600.175870][T11961] ? copy_signal+0x4e3/0x610 [ 2600.180294][T11961] copy_process+0x1175/0x3340 [ 2600.184808][T11961] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2600.189751][T11961] ? copy_clone_args_from_user+0x744/0x830 [ 2600.195395][T11961] kernel_clone+0x21e/0x9e0 [ 2600.199736][T11961] ? __delayed_free_task+0x20/0x20 [ 2600.204681][T11961] ? create_io_thread+0x1e0/0x1e0 [ 2600.209541][T11961] ? __this_cpu_preempt_check+0x13/0x20 [ 2600.214918][T11961] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2600.221431][T11961] __x64_sys_clone3+0x376/0x3a0 [ 2600.226116][T11961] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2600.231149][T11961] ? __ia32_sys_clone+0x290/0x290 [ 2600.236023][T11961] ? __kasan_check_read+0x11/0x20 [ 2600.240871][T11961] do_syscall_64+0x34/0x70 [ 2600.245127][T11961] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2600.250851][T11961] RIP: 0033:0x7fe73cec4ba9 [ 2600.255106][T11961] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2600.274546][T11961] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2600.282791][T11961] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2600.290601][T11961] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2600.298412][T11961] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2600.306221][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2600.314036][T11961] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcsock_tcp_recv_short\x00', r0}, 0x10) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0xcea, 0x6, 0x10001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 17:31:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcsock_tcp_recv_short\x00', r0}, 0x10) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0xcea, 0x6, 0x10001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) (rerun: 64) 17:31:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) (async) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) (async) sendto$inet(r4, &(0x7f00000004c0)="7fc23ea4740b6e3a840caf8dcd0121dbc9cf2bd4689dcd77762fb1b7f58a71ea1a42e5e4082fbd260d52d926557a4779d411d96a6e41bf8921cfd7c27813d82f84de6f95cd7c0b9b57d44035992b051c7999066c594653c1e810ff1534440d5ea5fb80fddcd906a706b955512b43f24822bb234f7c4f2361fd5ffc15dd41312f208892656a5964cf8416a3f0959e054602ea6141c9af42d644f47f6af7e655a319e95ef2af2faa4d5684f1c05f1fbcfd0a340a40baa2fdd80a4a0c86ccef37cf838fe927bb4166b0c1e49e97b593a89d7b6237dc7d537caaf147", 0xda, 0x4000801, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) (async) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) sendto$inet(r4, &(0x7f00000004c0)="7fc23ea4740b6e3a840caf8dcd0121dbc9cf2bd4689dcd77762fb1b7f58a71ea1a42e5e4082fbd260d52d926557a4779d411d96a6e41bf8921cfd7c27813d82f84de6f95cd7c0b9b57d44035992b051c7999066c594653c1e810ff1534440d5ea5fb80fddcd906a706b955512b43f24822bb234f7c4f2361fd5ffc15dd41312f208892656a5964cf8416a3f0959e054602ea6141c9af42d644f47f6af7e655a319e95ef2af2faa4d5684f1c05f1fbcfd0a340a40baa2fdd80a4a0c86ccef37cf838fe927bb4166b0c1e49e97b593a89d7b6237dc7d537caaf147", 0xda, 0x4000801, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:01 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0x41000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18015d0000000000000000005e00220085000000feff000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@dont_measure}, {@pcr}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 17:31:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcsock_tcp_recv_short\x00', r0}, 0x10) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0xcea, 0x6, 0x10001}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any}]}}) 17:31:01 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="d60e135a2c19c17ca2b688e9623b35680ad966de46d2294fcc0ca523aab8e691e8fbc0be0af8fa6d2ab686d17c4fe318138c93ea4aa8199297f10ae26c4cb480107f3ed51a347d41b28a0371fe1e6572a201fdbc9432a389c33a6a3aad192717e7e6eacb8faef8d0ed6116ae49fa88dee903a0f389dae1b4fa3d3a39fafcee5739f2131a736bc093fc90be1263070bc73a48fdbb8d74786d0e0e44e598b78356b1a7dc812ca06585277386ac7d949f84b6d91caea81456ee2798250f934873e2bdd45d083383be3de031fb9fb7279ece5366a2cbd873c3cd8a9fecf401f8b8a0332d9ea02efb178648ca52c3b3b127dd7e0014faf1070332ca6866", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}], 0x1, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18015d0000000000000000005e00220085000000feff000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@dont_measure}, {@pcr}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18015d0000000000000000005e00220085000000feff000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@dont_measure}, {@pcr}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) [ 2600.851541][T12004] FAULT_INJECTION: forcing a failure. [ 2600.851541][T12004] name failslab, interval 1, probability 0, space 0, times 0 [ 2600.863987][T12004] CPU: 1 PID: 12004 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2600.874105][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2600.883995][T12004] Call Trace: [ 2600.887131][T12004] dump_stack_lvl+0x1e2/0x24b [ 2600.891637][T12004] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2600.896943][T12004] ? pfn_valid+0x1c0/0x1c0 [ 2600.901186][T12004] dump_stack+0x15/0x17 [ 2600.905180][T12004] should_fail+0x3c6/0x510 [ 2600.909435][T12004] ? vm_area_dup+0x26/0x270 [ 2600.913773][T12004] __should_failslab+0xa4/0xe0 [ 2600.918374][T12004] should_failslab+0x9/0x20 [ 2600.922888][T12004] kmem_cache_alloc+0x3d/0x2e0 [ 2600.927485][T12004] vm_area_dup+0x26/0x270 [ 2600.931645][T12004] copy_mm+0x8ac/0x13a0 [ 2600.935645][T12004] ? copy_signal+0x610/0x610 [ 2600.940070][T12004] ? __init_rwsem+0xd6/0x1c0 [ 2600.944493][T12004] copy_process+0x1175/0x3340 [ 2600.949010][T12004] ? __sched_text_start+0x8/0x8 [ 2600.953695][T12004] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2600.958652][T12004] ? copy_clone_args_from_user+0x744/0x830 [ 2600.964286][T12004] kernel_clone+0x21e/0x9e0 [ 2600.968618][T12004] ? __delayed_free_task+0x20/0x20 [ 2600.973569][T12004] ? create_io_thread+0x1e0/0x1e0 [ 2600.978435][T12004] __x64_sys_clone3+0x376/0x3a0 [ 2600.983114][T12004] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2600.988152][T12004] ? __ia32_sys_clone+0x290/0x290 [ 2600.993020][T12004] ? __kasan_check_read+0x11/0x20 [ 2600.997877][T12004] do_syscall_64+0x34/0x70 17:31:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18015d0000000000000000005e00220085000000feff000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@dont_measure}, {@pcr}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, {0x0, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) [ 2601.002124][T12004] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2601.007849][T12004] RIP: 0033:0x7fe73cec4ba9 [ 2601.012104][T12004] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2601.031547][T12004] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2601.039787][T12004] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2601.047597][T12004] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2601.055409][T12004] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2601.063221][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2601.071035][T12004] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:02 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r1) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, {0x0, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, {0x0, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfff0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:02 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xa0028000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfff0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 32) r3 = dup(r2) (rerun: 32) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) 17:31:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, {0x0, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, {0x0, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (async) 17:31:02 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2601.704648][T12054] FAULT_INJECTION: forcing a failure. [ 2601.704648][T12054] name failslab, interval 1, probability 0, space 0, times 0 [ 2601.717184][T12054] CPU: 1 PID: 12054 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2601.727213][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2601.737106][T12054] Call Trace: [ 2601.740238][T12054] dump_stack_lvl+0x1e2/0x24b [ 2601.744749][T12054] ? panic+0x80b/0x80b [ 2601.748660][T12054] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2601.753957][T12054] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 2601.760200][T12054] dump_stack+0x15/0x17 [ 2601.764193][T12054] should_fail+0x3c6/0x510 [ 2601.768445][T12054] ? anon_vma_fork+0xf7/0x4e0 [ 2601.772957][T12054] __should_failslab+0xa4/0xe0 [ 2601.777698][T12054] should_failslab+0x9/0x20 [ 2601.781982][T12054] kmem_cache_alloc+0x3d/0x2e0 [ 2601.786586][T12054] anon_vma_fork+0xf7/0x4e0 [ 2601.790919][T12054] ? anon_vma_name+0x4c/0x70 [ 2601.795351][T12054] ? vm_area_dup+0x1a1/0x270 [ 2601.799773][T12054] copy_mm+0x95a/0x13a0 [ 2601.803766][T12054] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 2601.809235][T12054] ? copy_signal+0x610/0x610 [ 2601.813664][T12054] ? __init_rwsem+0xd6/0x1c0 [ 2601.818085][T12054] ? copy_signal+0x4e3/0x610 [ 2601.822510][T12054] copy_process+0x1175/0x3340 [ 2601.827027][T12054] ? memset+0x35/0x40 [ 2601.830850][T12054] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2601.835794][T12054] ? copy_clone_args_from_user+0x744/0x830 [ 2601.841433][T12054] kernel_clone+0x21e/0x9e0 [ 2601.845784][T12054] ? __delayed_free_task+0x20/0x20 17:31:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {0x0}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfff0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 64) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x1000800, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}, {@posixacl}, {@version_u}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x3}}, {@cache_fscache}, {@access_any}, {@mmap}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@subj_role={'subj_role', 0x3d, '&*@-\'!'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@fowner_lt={'fowner<', r5}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="4e8b71edbc05c4a6a5c9dd25b04f963beeb5908b344b24ac22860a96217d504e28ac31c993652b7bde7dca52c8dc6e7679562cbe7ae5ea3ad2b17c6d50940efefac0ddefe58616edab20f910c769cc260767c833514a5e2c156bd14a17b60c7f8f576d0dc0d4ebe20d71797fc62974ad1cdecc6049100aa8dcd6d326de201d1f720a8c9d74", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) [ 2601.850718][T12054] ? create_io_thread+0x1e0/0x1e0 [ 2601.855583][T12054] ? kernel_write+0x3d0/0x3d0 [ 2601.860095][T12054] __x64_sys_clone3+0x376/0x3a0 [ 2601.864780][T12054] ? __ia32_sys_clone+0x290/0x290 [ 2601.869668][T12054] ? ksys_write+0x260/0x2c0 [ 2601.873995][T12054] ? __kasan_check_write+0x14/0x20 [ 2601.878937][T12054] ? debug_smp_processor_id+0x17/0x20 [ 2601.884150][T12054] do_syscall_64+0x34/0x70 [ 2601.888396][T12054] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2601.894113][T12054] RIP: 0033:0x7fe73cec4ba9 [ 2601.898368][T12054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2601.917824][T12054] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2601.926057][T12054] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2601.933864][T12054] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2601.941679][T12054] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2601.949509][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2601.957302][T12054] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:03 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x1000800, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}, {@posixacl}, {@version_u}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x3}}, {@cache_fscache}, {@access_any}, {@mmap}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@subj_role={'subj_role', 0x3d, '&*@-\'!'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@fowner_lt={'fowner<', r5}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="4e8b71edbc05c4a6a5c9dd25b04f963beeb5908b344b24ac22860a96217d504e28ac31c993652b7bde7dca52c8dc6e7679562cbe7ae5ea3ad2b17c6d50940efefac0ddefe58616edab20f910c769cc260767c833514a5e2c156bd14a17b60c7f8f576d0dc0d4ebe20d71797fc62974ad1cdecc6049100aa8dcd6d326de201d1f720a8c9d74", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) 17:31:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x1000800, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}, {@posixacl}, {@version_u}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x3}}, {@cache_fscache}, {@access_any}, {@mmap}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@subj_role={'subj_role', 0x3d, '&*@-\'!'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@fowner_lt={'fowner<', r5}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="4e8b71edbc05c4a6a5c9dd25b04f963beeb5908b344b24ac22860a96217d504e28ac31c993652b7bde7dca52c8dc6e7679562cbe7ae5ea3ad2b17c6d50940efefac0ddefe58616edab20f910c769cc260767c833514a5e2c156bd14a17b60c7f8f576d0dc0d4ebe20d71797fc62974ad1cdecc6049100aa8dcd6d326de201d1f720a8c9d74", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) 17:31:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230303076beb8ab562c3a9866947d71cdf68dfc004b5b84752fcd1663e4ade676c79f33a57999f79dbea38a3e21c368883e35aebc3fb869dcb2010638bf742e42cc5d150b2180e0b6d56ecba6b79d97f2d78816cef4fd76ba541dc646e437e833d9080619c7f5ecac86cf39b83e62577653d4c918e21159500e8536f4cd1733798506728e0a3b3845bb752582dc6257d81d7a2fc91dde4b2e93bde0c9ba8eb1167cc0c274867f12e6377c1bf7ae541b913b9d6dc0fcb0c9d5034d46ff5a93817d3077886163da06a1cc8eb51ee11fc5782e6587c76346cb"], 0x15) ioctl$BLKSECTGET(0xffffffffffffffff, 0x80041285, &(0x7f0000000000)) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r5, 0x80041285, &(0x7f0000000000)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) statx(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x2000, 0x2, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) r11 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r11, 0x80041285, &(0x7f0000000000)) r12 = eventfd2(0x71, 0x1) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x200, 0x0) r14 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001080)='pids.max\x00', 0x2, 0x0) r15 = userfaultfd(0x801) r16 = getpid() sched_setscheduler(r16, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="8a1c5d39f5c173833df94e7ec30e36ae962a8cb9001d9909944cb9d99381c2d9c2b0dc8fb24342d9a807b8e61bdece654371dc6a44e1f346c059bcd0be8063b2fa413a2bab24ca5d3c22408f59e98fdbeb5717e9160d24277b", 0x59}, {&(0x7f0000000180)="d169a1bc486cc6be340584970108555141dcbf2f4b6a10eb65", 0x19}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f0000000340)="5a50c6ba7fbd58591eec7391281c07f957ce5fc2b258c31f6961e4afbd", 0x1d}], 0x4, 0x0, 0x0, 0x4000}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000640)="5bb2a7377222dbc681f7345ffc5d289968294a08083cb72fea8dcb83ac30dbf3c7b3436f775a396544118585101df221c9c6295e180b5deedac0a432b064e45eecd76495ed138fc9e952bbe464a0deb4ad22a4b9ae7c5a0120f423a232190d6fdfec0db17e8a8cba7e88e68d7a336ae8739a25f67007256a9a0aae18cea37dbfd9c74dbc7a44c0f4e3147042726c", 0x8e}, {&(0x7f00000003c0)="1155780d4a58645dd306802951b3563835c97353d1bae7ca944c3dbfcc20cf79f9a622548c9700", 0x27}, {&(0x7f0000000700)="b3f1acd27627b476ca6358005aebdd209b04a9bed22bcb869d7412eca4f623fa87c9251336e2984d229bcbfb57b7731c62c753139e1d42160bbe61a48c8fd487a593e7e8b1f0926ee4c4d246dbbba3205d2aa26bd360c4546380dee999fb867bcb6105b279db44e87a54734da394d8", 0x6f}, {&(0x7f0000000780)="77db7f1669c21b6c910479bc59abb0d3ced119258494d941177d076e15b455487a1fa0a5411dc4d9bfe8977f044ebe0a1367df1c1ade43162ddf70210f0723bdd00e252a423d4d80c6a40ed37d991929ada15435eb466b34b826b59d5b6364b01fbe1d72b7b08d6569dbe7d97631e8ee3523210a3b37fa2ed9977b6dc86f593303dca0fc41c0b4c56e264375254b537be5e9dd85f399a192bde925693d7e769d99ff85c570d950698f21925beee51be663a5ba820341c8e02eaa1f", 0xbb}, {&(0x7f00000008c0)="9b54215c776a54fb0d483e5c94bf06891ae94250cd47e60c864485921688bf883b2a8b4b8ff10c609b5765be05624d137d61243ab4972476b6739522c951a9a89926b1cb6cf8989c429841e6decbb0e0", 0x50}, {&(0x7f0000000940)="d79d326e2de185cd75b43604b17159f5657bf82e5d0f0832bc1303a4c411f401097a534d798fe7b5866a8eb3644a1c33add0086723e67fcd5cc9feec93b35498c3d6d86eb1b5a8ba2ce9205802a9371cce6a1b5e4a5f7692a70175428e13c9957eaaf5d64d9da1f532c53a955b9589cde9d144aff4e67789dbb86f906ba1734072bb8d09f23e3f5129", 0x89}, {&(0x7f0000000a00)="b3c587e5ce5d77aaea09a8b828832f18564d1a1b58d94c132d54952a8404a7cc30588772b7cdcbd77b4e13399207f2dd417aed077794ac34c74edf022626280b4449e60a11c9c7ee096113db85ba4bf8727ae8fc02734468d6c4f357", 0x5c}, {&(0x7f0000000a80)="82e917261ff665801dc1ebc8603918ed4b3172be39e8ae0545bb380e93989e52e713a7a33328f5e04979ec42295a0589bdaa455841a6550e661221e24e0d77b72402eeb460d56a3fa7b0f96dd04f82f10a7fc650ceac8914f1e2785acd71f1a153b54e2b3017da3f9a8a1e46ad33e843cb09d6780936f3efb0388c76f49916162a98d68ee83624ec129b275d8a8db1ca885466a9f0ac06ec22f20a1456fafdc877b4287281659dfdcb577305e460fd226576dc72293a0448be151ec2ce6dc5df937c076dd838ca90fca092bd71125e7ad8b41f8eab94c10803d1aa28aab500d06136", 0xe2}], 0x8, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r3, r1, r2, r2, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}], 0xd8, 0x60a22a177110da10}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="c4fd1d59ad5567c6071b60ea08fd2768007ea1b208d711e8f0f5080ab93705fc51af7ec20896bb757a20c81e4f3d69277459329a78f2077c8ba12f7b0f52d2bf2f7f939e990b2b34f355fd18ade3dd74398f155ec01c22797b8a8ea9dd0449b3aa73c16b8c84bb8eed23abcdaba9e3393eb8e659407e", 0x76}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="00000000c5a156932c"], 0xa0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001180)="42c0d48f4d5befdc10175e6c72a1e90ba1c46d924dc439c97317027cf9daaa6681670aea8734391a6ba0b3b15581bc2a229f5fb59106d00b504936b2b25e43a564946a3e869decfca1f0c6d674a7c50d664a", 0x52}, {&(0x7f0000001200)="af4551cbcebdcd39a49dd409b5fbe123beb9f5e74e064a0ee47d48b1ff29aa6e0fc23b9de7563f3a8bb34cbec0e22a4e41d2cf0a8920e148cbb4f9a10297308912cf468d7a52fe51c8bac13a6629a1493408f094b5ccf891eba3ebd3e0ca20d2996564d81402c239b4659a5834115dd001e5e3f84629541e494d3cb43375a77b6d77ac", 0x83}, {&(0x7f00000012c0)="51c9a64615787774278c0f01c61eb642774dbb41c75cfc074ac36caeef20849c5a7a6155822f6831770ba5c0350f04ce950d2c3fc114de777e39dcc14bdc20645feef33514636e2ff3dbff4a63d9a7201b6533f24527c6c7682c32b2b3bf6e93af7d0cb648c1cf2da696f18b25ad7a5f631bb076144672a07789b1a5c1a04868d017285f4e32d1925205bc2f2be5c227a0afebd93a593945d8d590218b9320169e8df6695bb3bb7f1d1919855b7ebfb83a9b535d097dd5a9b5", 0xb9}, {&(0x7f0000001380)="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", 0x1000}], 0x4, 0x0, 0x0, 0x5c}}], 0x4, 0x40005) r17 = dup(r3) write$FUSE_DIRENTPLUS(r17, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r17, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 2602.279055][T12074] 9pnet: Insufficient options for proto=fd 17:31:03 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xb2020000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x80041285, &(0x7f0000000000)) write(r3, &(0x7f0000000040)="b3f8", 0x2) r4 = dup(r2) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) 17:31:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230303076beb8ab562c3a9866947d71cdf68dfc004b5b84752fcd1663e4ade676c79f33a57999f79dbea38a3e21c368883e35aebc3fb869dcb2010638bf742e42cc5d150b2180e0b6d56ecba6b79d97f2d78816cef4fd76ba541dc646e437e833d9080619c7f5ecac86cf39b83e62577653d4c918e21159500e8536f4cd1733798506728e0a3b3845bb752582dc6257d81d7a2fc91dde4b2e93bde0c9ba8eb1167cc0c274867f12e6377c1bf7ae541b913b9d6dc0fcb0c9d5034d46ff5a93817d3077886163da06a1cc8eb51ee11fc5782e6587c76346cb"], 0x15) ioctl$BLKSECTGET(0xffffffffffffffff, 0x80041285, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r5, 0x80041285, &(0x7f0000000000)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) statx(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x2000, 0x2, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) (async) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) r11 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r11, 0x80041285, &(0x7f0000000000)) (async) ioctl$BLKSECTGET(r11, 0x80041285, &(0x7f0000000000)) eventfd2(0x71, 0x1) (async) r12 = eventfd2(0x71, 0x1) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x200, 0x0) r14 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001080)='pids.max\x00', 0x2, 0x0) userfaultfd(0x801) (async) r15 = userfaultfd(0x801) r16 = getpid() sched_setscheduler(r16, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="8a1c5d39f5c173833df94e7ec30e36ae962a8cb9001d9909944cb9d99381c2d9c2b0dc8fb24342d9a807b8e61bdece654371dc6a44e1f346c059bcd0be8063b2fa413a2bab24ca5d3c22408f59e98fdbeb5717e9160d24277b", 0x59}, {&(0x7f0000000180)="d169a1bc486cc6be340584970108555141dcbf2f4b6a10eb65", 0x19}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f0000000340)="5a50c6ba7fbd58591eec7391281c07f957ce5fc2b258c31f6961e4afbd", 0x1d}], 0x4, 0x0, 0x0, 0x4000}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000640)="5bb2a7377222dbc681f7345ffc5d289968294a08083cb72fea8dcb83ac30dbf3c7b3436f775a396544118585101df221c9c6295e180b5deedac0a432b064e45eecd76495ed138fc9e952bbe464a0deb4ad22a4b9ae7c5a0120f423a232190d6fdfec0db17e8a8cba7e88e68d7a336ae8739a25f67007256a9a0aae18cea37dbfd9c74dbc7a44c0f4e3147042726c", 0x8e}, {&(0x7f00000003c0)="1155780d4a58645dd306802951b3563835c97353d1bae7ca944c3dbfcc20cf79f9a622548c9700", 0x27}, {&(0x7f0000000700)="b3f1acd27627b476ca6358005aebdd209b04a9bed22bcb869d7412eca4f623fa87c9251336e2984d229bcbfb57b7731c62c753139e1d42160bbe61a48c8fd487a593e7e8b1f0926ee4c4d246dbbba3205d2aa26bd360c4546380dee999fb867bcb6105b279db44e87a54734da394d8", 0x6f}, {&(0x7f0000000780)="77db7f1669c21b6c910479bc59abb0d3ced119258494d941177d076e15b455487a1fa0a5411dc4d9bfe8977f044ebe0a1367df1c1ade43162ddf70210f0723bdd00e252a423d4d80c6a40ed37d991929ada15435eb466b34b826b59d5b6364b01fbe1d72b7b08d6569dbe7d97631e8ee3523210a3b37fa2ed9977b6dc86f593303dca0fc41c0b4c56e264375254b537be5e9dd85f399a192bde925693d7e769d99ff85c570d950698f21925beee51be663a5ba820341c8e02eaa1f", 0xbb}, {&(0x7f00000008c0)="9b54215c776a54fb0d483e5c94bf06891ae94250cd47e60c864485921688bf883b2a8b4b8ff10c609b5765be05624d137d61243ab4972476b6739522c951a9a89926b1cb6cf8989c429841e6decbb0e0", 0x50}, {&(0x7f0000000940)="d79d326e2de185cd75b43604b17159f5657bf82e5d0f0832bc1303a4c411f401097a534d798fe7b5866a8eb3644a1c33add0086723e67fcd5cc9feec93b35498c3d6d86eb1b5a8ba2ce9205802a9371cce6a1b5e4a5f7692a70175428e13c9957eaaf5d64d9da1f532c53a955b9589cde9d144aff4e67789dbb86f906ba1734072bb8d09f23e3f5129", 0x89}, {&(0x7f0000000a00)="b3c587e5ce5d77aaea09a8b828832f18564d1a1b58d94c132d54952a8404a7cc30588772b7cdcbd77b4e13399207f2dd417aed077794ac34c74edf022626280b4449e60a11c9c7ee096113db85ba4bf8727ae8fc02734468d6c4f357", 0x5c}, {&(0x7f0000000a80)="82e917261ff665801dc1ebc8603918ed4b3172be39e8ae0545bb380e93989e52e713a7a33328f5e04979ec42295a0589bdaa455841a6550e661221e24e0d77b72402eeb460d56a3fa7b0f96dd04f82f10a7fc650ceac8914f1e2785acd71f1a153b54e2b3017da3f9a8a1e46ad33e843cb09d6780936f3efb0388c76f49916162a98d68ee83624ec129b275d8a8db1ca885466a9f0ac06ec22f20a1456fafdc877b4287281659dfdcb577305e460fd226576dc72293a0448be151ec2ce6dc5df937c076dd838ca90fca092bd71125e7ad8b41f8eab94c10803d1aa28aab500d06136", 0xe2}], 0x8, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r3, r1, r2, r2, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}], 0xd8, 0x60a22a177110da10}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="c4fd1d59ad5567c6071b60ea08fd2768007ea1b208d711e8f0f5080ab93705fc51af7ec20896bb757a20c81e4f3d69277459329a78f2077c8ba12f7b0f52d2bf2f7f939e990b2b34f355fd18ade3dd74398f155ec01c22797b8a8ea9dd0449b3aa73c16b8c84bb8eed23abcdaba9e3393eb8e659407e", 0x76}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="00000000c5a156932c"], 0xa0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001180)="42c0d48f4d5befdc10175e6c72a1e90ba1c46d924dc439c97317027cf9daaa6681670aea8734391a6ba0b3b15581bc2a229f5fb59106d00b504936b2b25e43a564946a3e869decfca1f0c6d674a7c50d664a", 0x52}, {&(0x7f0000001200)="af4551cbcebdcd39a49dd409b5fbe123beb9f5e74e064a0ee47d48b1ff29aa6e0fc23b9de7563f3a8bb34cbec0e22a4e41d2cf0a8920e148cbb4f9a10297308912cf468d7a52fe51c8bac13a6629a1493408f094b5ccf891eba3ebd3e0ca20d2996564d81402c239b4659a5834115dd001e5e3f84629541e494d3cb43375a77b6d77ac", 0x83}, {&(0x7f00000012c0)="51c9a64615787774278c0f01c61eb642774dbb41c75cfc074ac36caeef20849c5a7a6155822f6831770ba5c0350f04ce950d2c3fc114de777e39dcc14bdc20645feef33514636e2ff3dbff4a63d9a7201b6533f24527c6c7682c32b2b3bf6e93af7d0cb648c1cf2da696f18b25ad7a5f631bb076144672a07789b1a5c1a04868d017285f4e32d1925205bc2f2be5c227a0afebd93a593945d8d590218b9320169e8df6695bb3bb7f1d1919855b7ebfb83a9b535d097dd5a9b5", 0xb9}, {&(0x7f0000001380)="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", 0x1000}], 0x4, 0x0, 0x0, 0x5c}}], 0x4, 0x40005) dup(r3) (async) r17 = dup(r3) write$FUSE_DIRENTPLUS(r17, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r17, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r17, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:31:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x80041285, &(0x7f0000000000)) (async) write(r3, &(0x7f0000000040)="b3f8", 0x2) (async) r4 = dup(r2) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xa8) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) [ 2602.565466][T12095] FAULT_INJECTION: forcing a failure. [ 2602.565466][T12095] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.577987][T12095] CPU: 1 PID: 12095 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2602.588036][T12095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2602.597923][T12095] Call Trace: [ 2602.601061][T12095] dump_stack_lvl+0x1e2/0x24b [ 2602.605574][T12095] ? panic+0x80b/0x80b [ 2602.609475][T12095] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2602.614772][T12095] dump_stack+0x15/0x17 [ 2602.618763][T12095] should_fail+0x3c6/0x510 [ 2602.623014][T12095] ? anon_vma_fork+0x1df/0x4e0 [ 2602.627620][T12095] __should_failslab+0xa4/0xe0 [ 2602.632218][T12095] should_failslab+0x9/0x20 [ 2602.636556][T12095] kmem_cache_alloc+0x3d/0x2e0 [ 2602.641154][T12095] ? anon_vma_fork+0xf7/0x4e0 [ 2602.645666][T12095] anon_vma_fork+0x1df/0x4e0 [ 2602.650094][T12095] copy_mm+0x95a/0x13a0 [ 2602.654086][T12095] ? sysvec_reschedule_ipi+0x83/0x160 [ 2602.659308][T12095] ? copy_signal+0x610/0x610 [ 2602.663720][T12095] ? __init_rwsem+0xd6/0x1c0 [ 2602.668144][T12095] ? copy_signal+0x4e3/0x610 [ 2602.672583][T12095] copy_process+0x1175/0x3340 [ 2602.677088][T12095] ? __sched_text_start+0x8/0x8 [ 2602.681768][T12095] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2602.686711][T12095] ? preempt_schedule_irq+0xe7/0x140 [ 2602.691829][T12095] ? preempt_schedule_notrace+0x140/0x140 [ 2602.697391][T12095] ? copy_clone_args_from_user+0x744/0x830 [ 2602.703025][T12095] kernel_clone+0x21e/0x9e0 [ 2602.707365][T12095] ? sysvec_reschedule_ipi+0x83/0x160 [ 2602.712583][T12095] ? create_io_thread+0x1e0/0x1e0 [ 2602.717432][T12095] __x64_sys_clone3+0x376/0x3a0 [ 2602.722119][T12095] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2602.727151][T12095] ? __ia32_sys_clone+0x290/0x290 [ 2602.732022][T12095] ? __kasan_check_read+0x11/0x20 [ 2602.736881][T12095] do_syscall_64+0x34/0x70 [ 2602.741126][T12095] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2602.746854][T12095] RIP: 0033:0x7fe73cec4ba9 [ 2602.751110][T12095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2602.770547][T12095] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2602.778794][T12095] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2602.786604][T12095] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2602.794413][T12095] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2602.802224][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2602.810037][T12095] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:04 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xe0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r2) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230303076beb8ab562c3a9866947d71cdf68dfc004b5b84752fcd1663e4ade676c79f33a57999f79dbea38a3e21c368883e35aebc3fb869dcb2010638bf742e42cc5d150b2180e0b6d56ecba6b79d97f2d78816cef4fd76ba541dc646e437e833d9080619c7f5ecac86cf39b83e62577653d4c918e21159500e8536f4cd1733798506728e0a3b3845bb752582dc6257d81d7a2fc91dde4b2e93bde0c9ba8eb1167cc0c274867f12e6377c1bf7ae541b913b9d6dc0fcb0c9d5034d46ff5a93817d3077886163da06a1cc8eb51ee11fc5782e6587c76346cb"], 0x15) ioctl$BLKSECTGET(0xffffffffffffffff, 0x80041285, &(0x7f0000000000)) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r5, 0x80041285, &(0x7f0000000000)) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) statx(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x2000, 0x2, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) (async) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) r11 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r11, 0x80041285, &(0x7f0000000000)) (async) r12 = eventfd2(0x71, 0x1) (async) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x200, 0x0) r14 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001080)='pids.max\x00', 0x2, 0x0) (async) r15 = userfaultfd(0x801) r16 = getpid() sched_setscheduler(r16, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="8a1c5d39f5c173833df94e7ec30e36ae962a8cb9001d9909944cb9d99381c2d9c2b0dc8fb24342d9a807b8e61bdece654371dc6a44e1f346c059bcd0be8063b2fa413a2bab24ca5d3c22408f59e98fdbeb5717e9160d24277b", 0x59}, {&(0x7f0000000180)="d169a1bc486cc6be340584970108555141dcbf2f4b6a10eb65", 0x19}, {&(0x7f00000004c0)="37cbaaa422a20ed8fd19a93f5615992b4dbeb42604bbcdafe2ff72a9803af3b115cababb4755456044d1d507b51bfb0225afc600686cbb9e5d7e62161fee13001a9ef517bb625140cf48198118fe11339c326dea4c78ac463e481f8f32c159b597511a9fb3dee940a9ef9626e5931c77abc3b795b61326a5b6cc4d22086b9c53b2d98aeda5088aeb521b54888d5bb6073e251cbcb67a9ffa6f685d8e68164a06e9a752b24e4824d99f2bc992000208fb4a5efcfbafd8754143ba973232cb2ca1cc573663337262c025a29199684e16fe867afcb9a8c8ca7039c63172fb2fb4b384f864a6401bcd2d73a1ebbf87926f5c04f99849c3c3b161101443e0b7", 0xfd}, {&(0x7f0000000340)="5a50c6ba7fbd58591eec7391281c07f957ce5fc2b258c31f6961e4afbd", 0x1d}], 0x4, 0x0, 0x0, 0x4000}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000640)="5bb2a7377222dbc681f7345ffc5d289968294a08083cb72fea8dcb83ac30dbf3c7b3436f775a396544118585101df221c9c6295e180b5deedac0a432b064e45eecd76495ed138fc9e952bbe464a0deb4ad22a4b9ae7c5a0120f423a232190d6fdfec0db17e8a8cba7e88e68d7a336ae8739a25f67007256a9a0aae18cea37dbfd9c74dbc7a44c0f4e3147042726c", 0x8e}, {&(0x7f00000003c0)="1155780d4a58645dd306802951b3563835c97353d1bae7ca944c3dbfcc20cf79f9a622548c9700", 0x27}, {&(0x7f0000000700)="b3f1acd27627b476ca6358005aebdd209b04a9bed22bcb869d7412eca4f623fa87c9251336e2984d229bcbfb57b7731c62c753139e1d42160bbe61a48c8fd487a593e7e8b1f0926ee4c4d246dbbba3205d2aa26bd360c4546380dee999fb867bcb6105b279db44e87a54734da394d8", 0x6f}, {&(0x7f0000000780)="77db7f1669c21b6c910479bc59abb0d3ced119258494d941177d076e15b455487a1fa0a5411dc4d9bfe8977f044ebe0a1367df1c1ade43162ddf70210f0723bdd00e252a423d4d80c6a40ed37d991929ada15435eb466b34b826b59d5b6364b01fbe1d72b7b08d6569dbe7d97631e8ee3523210a3b37fa2ed9977b6dc86f593303dca0fc41c0b4c56e264375254b537be5e9dd85f399a192bde925693d7e769d99ff85c570d950698f21925beee51be663a5ba820341c8e02eaa1f", 0xbb}, {&(0x7f00000008c0)="9b54215c776a54fb0d483e5c94bf06891ae94250cd47e60c864485921688bf883b2a8b4b8ff10c609b5765be05624d137d61243ab4972476b6739522c951a9a89926b1cb6cf8989c429841e6decbb0e0", 0x50}, {&(0x7f0000000940)="d79d326e2de185cd75b43604b17159f5657bf82e5d0f0832bc1303a4c411f401097a534d798fe7b5866a8eb3644a1c33add0086723e67fcd5cc9feec93b35498c3d6d86eb1b5a8ba2ce9205802a9371cce6a1b5e4a5f7692a70175428e13c9957eaaf5d64d9da1f532c53a955b9589cde9d144aff4e67789dbb86f906ba1734072bb8d09f23e3f5129", 0x89}, {&(0x7f0000000a00)="b3c587e5ce5d77aaea09a8b828832f18564d1a1b58d94c132d54952a8404a7cc30588772b7cdcbd77b4e13399207f2dd417aed077794ac34c74edf022626280b4449e60a11c9c7ee096113db85ba4bf8727ae8fc02734468d6c4f357", 0x5c}, {&(0x7f0000000a80)="82e917261ff665801dc1ebc8603918ed4b3172be39e8ae0545bb380e93989e52e713a7a33328f5e04979ec42295a0589bdaa455841a6550e661221e24e0d77b72402eeb460d56a3fa7b0f96dd04f82f10a7fc650ceac8914f1e2785acd71f1a153b54e2b3017da3f9a8a1e46ad33e843cb09d6780936f3efb0388c76f49916162a98d68ee83624ec129b275d8a8db1ca885466a9f0ac06ec22f20a1456fafdc877b4287281659dfdcb577305e460fd226576dc72293a0448be151ec2ce6dc5df937c076dd838ca90fca092bd71125e7ad8b41f8eab94c10803d1aa28aab500d06136", 0xe2}], 0x8, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r3, r1, r2, r2, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}], 0xd8, 0x60a22a177110da10}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="c4fd1d59ad5567c6071b60ea08fd2768007ea1b208d711e8f0f5080ab93705fc51af7ec20896bb757a20c81e4f3d69277459329a78f2077c8ba12f7b0f52d2bf2f7f939e990b2b34f355fd18ade3dd74398f155ec01c22797b8a8ea9dd0449b3aa73c16b8c84bb8eed23abcdaba9e3393eb8e659407e", 0x76}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="00000000c5a156932c"], 0xa0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001180)="42c0d48f4d5befdc10175e6c72a1e90ba1c46d924dc439c97317027cf9daaa6681670aea8734391a6ba0b3b15581bc2a229f5fb59106d00b504936b2b25e43a564946a3e869decfca1f0c6d674a7c50d664a", 0x52}, {&(0x7f0000001200)="af4551cbcebdcd39a49dd409b5fbe123beb9f5e74e064a0ee47d48b1ff29aa6e0fc23b9de7563f3a8bb34cbec0e22a4e41d2cf0a8920e148cbb4f9a10297308912cf468d7a52fe51c8bac13a6629a1493408f094b5ccf891eba3ebd3e0ca20d2996564d81402c239b4659a5834115dd001e5e3f84629541e494d3cb43375a77b6d77ac", 0x83}, {&(0x7f00000012c0)="51c9a64615787774278c0f01c61eb642774dbb41c75cfc074ac36caeef20849c5a7a6155822f6831770ba5c0350f04ce950d2c3fc114de777e39dcc14bdc20645feef33514636e2ff3dbff4a63d9a7201b6533f24527c6c7682c32b2b3bf6e93af7d0cb648c1cf2da696f18b25ad7a5f631bb076144672a07789b1a5c1a04868d017285f4e32d1925205bc2f2be5c227a0afebd93a593945d8d590218b9320169e8df6695bb3bb7f1d1919855b7ebfb83a9b535d097dd5a9b5", 0xb9}, {&(0x7f0000001380)="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", 0x1000}], 0x4, 0x0, 0x0, 0x5c}}], 0x4, 0x40005) (async) r17 = dup(r3) write$FUSE_DIRENTPLUS(r17, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r17, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:31:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {0x0}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x80041285, &(0x7f0000000000)) (async) write(r3, &(0x7f0000000040)="b3f8", 0x2) (async) r4 = dup(r2) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xa8) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000040)=@raw=[@generic={0x47, 0x9, 0xa, 0x9, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x5, 0x70, &(0x7f0000000340)=""/112, 0x0, 0xe, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0xa, 0xc}], 0x10, 0xffffffff}, 0x90) r2 = eventfd(0x837) fcntl$setsig(r2, 0xa, 0x35) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c64ff6f3d0000", @ANYRESHEX=r4, @ANYBLOB=',\x00']) truncate(&(0x7f0000000680)='./file0\x00', 0x7fffffffffffffff) 17:31:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) fcntl$addseals(r0, 0x409, 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000040)=@raw=[@generic={0x47, 0x9, 0xa, 0x9, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x5, 0x70, &(0x7f0000000340)=""/112, 0x0, 0xe, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0xa, 0xc}], 0x10, 0xffffffff}, 0x90) r2 = eventfd(0x837) fcntl$setsig(r2, 0xa, 0x35) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c64ff6f3d0000", @ANYRESHEX=r4, @ANYBLOB=',\x00']) (async) truncate(&(0x7f0000000680)='./file0\x00', 0x7fffffffffffffff) [ 2603.145880][T12112] 9pnet: Insufficient options for proto=fd 17:31:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) fcntl$addseals(r0, 0x409, 0x4) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:04 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xf5ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2603.190451][T12114] 9pnet: Insufficient options for proto=fd 17:31:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) 17:31:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000040)=@raw=[@generic={0x47, 0x9, 0xa, 0x9, 0x1ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x5, 0x70, &(0x7f0000000340)=""/112, 0x0, 0xe, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0xa, 0xc}], 0x10, 0xffffffff}, 0x90) r2 = eventfd(0x837) fcntl$setsig(r2, 0xa, 0x35) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 64) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c64ff6f3d0000", @ANYRESHEX=r4, @ANYBLOB=',\x00']) (async) truncate(&(0x7f0000000680)='./file0\x00', 0x7fffffffffffffff) 17:31:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) fcntl$addseals(r0, 0x409, 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:04 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xc0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041285, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 2603.312572][T12131] 9pnet: Insufficient options for proto=fd [ 2603.428237][T12146] FAULT_INJECTION: forcing a failure. [ 2603.428237][T12146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2603.441664][T12146] CPU: 1 PID: 12146 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2603.451789][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2603.461683][T12146] Call Trace: [ 2603.464820][T12146] dump_stack_lvl+0x1e2/0x24b [ 2603.469329][T12146] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2603.474627][T12146] dump_stack+0x15/0x17 [ 2603.478616][T12146] should_fail+0x3c6/0x510 [ 2603.482873][T12146] should_fail_alloc_page+0x52/0x60 [ 2603.487900][T12146] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2603.493198][T12146] ? is_bpf_text_address+0x172/0x190 [ 2603.498318][T12146] ? stack_trace_save+0x1c0/0x1c0 [ 2603.503179][T12146] ? __kernel_text_address+0x9b/0x110 [ 2603.508384][T12146] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2603.513766][T12146] ? arch_stack_walk+0xf3/0x140 [ 2603.518457][T12146] get_zeroed_page+0x19/0x40 [ 2603.522880][T12146] __pud_alloc+0x8b/0x260 [ 2603.527042][T12146] ? handle_mm_fault+0x1a10/0x1a10 [ 2603.531993][T12146] ? slab_post_alloc_hook+0x61/0x2f0 [ 2603.537113][T12146] copy_page_range+0x2cd6/0x3020 [ 2603.541885][T12146] ? kmem_cache_alloc+0x168/0x2e0 [ 2603.546745][T12146] ? anon_vma_fork+0x1df/0x4e0 [ 2603.551343][T12146] ? copy_process+0x1175/0x3340 [ 2603.556031][T12146] ? kernel_clone+0x21e/0x9e0 [ 2603.560549][T12146] ? do_syscall_64+0x34/0x70 [ 2603.564972][T12146] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2603.570883][T12146] ? pfn_valid+0x1c0/0x1c0 [ 2603.575130][T12146] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2603.580690][T12146] ? __rb_insert_augmented+0x5de/0x610 [ 2603.585979][T12146] ? _raw_write_unlock+0x2e/0x60 [ 2603.590749][T12146] copy_mm+0xc4a/0x13a0 [ 2603.594746][T12146] ? copy_signal+0x610/0x610 [ 2603.599164][T12146] ? __init_rwsem+0xd6/0x1c0 [ 2603.603587][T12146] ? copy_signal+0x4e3/0x610 [ 2603.608007][T12146] copy_process+0x1175/0x3340 [ 2603.612532][T12146] ? __switch_to+0x5f6/0x1240 [ 2603.617039][T12146] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2603.621993][T12146] ? kernel_clone+0x1fa/0x9e0 [ 2603.626494][T12146] kernel_clone+0x21e/0x9e0 [ 2603.630841][T12146] ? __delayed_free_task+0x20/0x20 [ 2603.635790][T12146] ? create_io_thread+0x1e0/0x1e0 [ 2603.640650][T12146] __x64_sys_clone3+0x376/0x3a0 [ 2603.645342][T12146] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2603.650361][T12146] ? __ia32_sys_clone+0x290/0x290 [ 2603.655232][T12146] do_syscall_64+0x34/0x70 [ 2603.659514][T12146] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2603.665212][T12146] RIP: 0033:0x7fe73cec4ba9 [ 2603.669461][T12146] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2603.688993][T12146] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2603.697237][T12146] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2603.705049][T12146] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2603.712859][T12146] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2603.720675][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2603.728484][T12146] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) chdir(&(0x7f0000000040)='./file0\x00') 17:31:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041285, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 17:31:05 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xc0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {0x0}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) chdir(&(0x7f0000000040)='./file0\x00') 17:31:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x80041285, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) ioctl$BLKSECTGET(r0, 0x80041285, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r3) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async) 17:31:05 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xfeffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) 17:31:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) chdir(&(0x7f0000000040)='./file0\x00') 17:31:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='f2fs_filemap_fault\x00', r3}, 0x10) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0xed05, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x4}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:05 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xc0, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2604.289503][T12186] FAULT_INJECTION: forcing a failure. [ 2604.289503][T12186] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.302174][T12186] CPU: 1 PID: 12186 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2604.312389][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2604.322272][T12186] Call Trace: [ 2604.325412][T12186] dump_stack_lvl+0x1e2/0x24b [ 2604.329923][T12186] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2604.335213][T12186] ? pfn_valid+0x1c0/0x1c0 [ 2604.339467][T12186] dump_stack+0x15/0x17 [ 2604.343462][T12186] should_fail+0x3c6/0x510 [ 2604.347715][T12186] ? vm_area_dup+0x26/0x270 [ 2604.352047][T12186] __should_failslab+0xa4/0xe0 [ 2604.356653][T12186] should_failslab+0x9/0x20 [ 2604.361003][T12186] kmem_cache_alloc+0x3d/0x2e0 [ 2604.365594][T12186] ? __kasan_check_read+0x11/0x20 [ 2604.370455][T12186] vm_area_dup+0x26/0x270 [ 2604.374616][T12186] copy_mm+0x8ac/0x13a0 [ 2604.378612][T12186] ? copy_signal+0x610/0x610 [ 2604.383036][T12186] ? __init_rwsem+0xd6/0x1c0 [ 2604.387458][T12186] ? copy_signal+0x4e3/0x610 [ 2604.391886][T12186] copy_process+0x1175/0x3340 [ 2604.396405][T12186] ? memset+0x35/0x40 [ 2604.400218][T12186] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2604.405166][T12186] ? copy_clone_args_from_user+0x744/0x830 [ 2604.410810][T12186] kernel_clone+0x21e/0x9e0 [ 2604.415148][T12186] ? __delayed_free_task+0x20/0x20 [ 2604.420096][T12186] ? create_io_thread+0x1e0/0x1e0 [ 2604.424958][T12186] ? kernel_write+0x3d0/0x3d0 [ 2604.429468][T12186] __x64_sys_clone3+0x376/0x3a0 [ 2604.434155][T12186] ? __ia32_sys_clone+0x290/0x290 [ 2604.439021][T12186] ? __kasan_check_read+0x11/0x20 [ 2604.443880][T12186] do_syscall_64+0x34/0x70 [ 2604.448138][T12186] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2604.453854][T12186] RIP: 0033:0x7fe73cec4ba9 [ 2604.458104][T12186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2604.477541][T12186] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2604.485782][T12186] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2604.493608][T12186] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2604.501406][T12186] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2604.509217][T12186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2604.517029][T12186] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (rerun: 32) 17:31:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='f2fs_filemap_fault\x00', r3}, 0x10) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0xed05, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x4}}}}, 0xa0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (rerun: 32) [ 2604.708043][T12191] 9pnet: Insufficient options for proto=fd [ 2604.746207][T12195] 9pnet: Insufficient options for proto=fd [ 2604.759912][T12195] 9pnet: Insufficient options for proto=fd [ 2604.779370][T12195] 9pnet: Insufficient options for proto=fd [ 2604.785678][T12195] 9pnet: Insufficient options for proto=fd [ 2604.799588][T12195] 9pnet: Insufficient options for proto=fd 17:31:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2604.809744][T12195] 9pnet: Insufficient options for proto=fd [ 2604.826391][T12195] 9pnet: Insufficient options for proto=fd [ 2604.841999][T12195] 9pnet: Insufficient options for proto=fd 17:31:05 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xb8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x200, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r10 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x1000000201006) recvmsg(r10, &(0x7f00000008c0)={&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x4, &(0x7f0000000840)=""/67, 0x43}, 0x100) sendmmsg$unix(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0x20}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = getpid() r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r11, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}], 0x20}}], 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0xc8000000000}}, {@mode={'mode', 0x3d, 0x7fffffffffffffff}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r3}}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x35, 0x6d, 0x6b, 0x26, 0x32, 0x67]}}, {@gid}], [{@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@euid_lt={'euid<', r7}}, {@uid_gt={'uid>', r14}}, {@fowner_gt={'fowner>', 0xee00}}]}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r16 = dup(r2) write$FUSE_DIRENTPLUS(r16, &(0x7f0000000880)=ANY=[@ANYBLOB], 0xa8) write$FUSE_CREATE_OPEN(r16, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2604.855303][T12195] 9pnet: Insufficient options for proto=fd [ 2604.868778][T12195] 9pnet: Insufficient options for proto=fd [ 2604.898888][T12195] 9pnet: Insufficient options for proto=fd 17:31:06 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xff0f0100}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2604.909710][T12195] 9pnet: Insufficient options for proto=fd [ 2604.923087][T12195] 9pnet: Insufficient options for proto=fd [ 2604.946507][T12195] 9pnet: Insufficient options for proto=fd [ 2604.950296][T12208] tmpfs: Bad value for 'mode' [ 2604.958937][T12195] 9pnet: Insufficient options for proto=fd [ 2604.972325][T12195] 9pnet: Insufficient options for proto=fd [ 2604.987124][T12195] 9pnet: Insufficient options for proto=fd [ 2605.001850][T12195] 9pnet: Insufficient options for proto=fd 17:31:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 17:31:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x200, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() (async) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) (async) r9 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r10 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x1000000201006) (async, rerun: 64) recvmsg(r10, &(0x7f00000008c0)={&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x4, &(0x7f0000000840)=""/67, 0x43}, 0x100) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0x20}}], 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r12 = getpid() (async, rerun: 64) r13 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r11, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}], 0x20}}], 0x1, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0xc8000000000}}, {@mode={'mode', 0x3d, 0x7fffffffffffffff}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r3}}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x35, 0x6d, 0x6b, 0x26, 0x32, 0x67]}}, {@gid}], [{@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@euid_lt={'euid<', r7}}, {@uid_gt={'uid>', r14}}, {@fowner_gt={'fowner>', 0xee00}}]}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r16 = dup(r2) write$FUSE_DIRENTPLUS(r16, &(0x7f0000000880)=ANY=[@ANYBLOB], 0xa8) write$FUSE_CREATE_OPEN(r16, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2605.024195][T12195] 9pnet: Insufficient options for proto=fd [ 2605.039289][T12195] 9pnet: Insufficient options for proto=fd [ 2605.039870][T12216] tmpfs: Bad value for 'mode' [ 2605.053250][T12195] 9pnet: Insufficient options for proto=fd [ 2605.066849][T12195] 9pnet: Insufficient options for proto=fd [ 2605.080368][T12195] 9pnet: Insufficient options for proto=fd [ 2605.119922][T12195] 9pnet: Insufficient options for proto=fd [ 2605.128156][T12195] 9pnet: Insufficient options for proto=fd [ 2605.142558][T12222] FAULT_INJECTION: forcing a failure. [ 2605.142558][T12222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2605.155622][T12222] CPU: 1 PID: 12222 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2605.165709][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2605.175600][T12222] Call Trace: 17:31:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x200, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() (async) r5 = getpid() r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r9 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r10 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x1000000201006) recvmsg(r10, &(0x7f00000008c0)={&(0x7f0000000340)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x4, &(0x7f0000000840)=""/67, 0x43}, 0x100) sendmmsg$unix(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0x20}}], 0x1, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}], 0x20}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() (async) r12 = getpid() socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r11, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}], 0x20}}], 0x1, 0x0) (async) sendmmsg$unix(r11, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}], 0x20}}], 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0xc8000000000}}, {@mode={'mode', 0x3d, 0x7fffffffffffffff}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r3}}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x35, 0x6d, 0x6b, 0x26, 0x32, 0x67]}}, {@gid}], [{@subj_type={'subj_type', 0x3d, 'trans=fd,'}}, {@euid_lt={'euid<', r7}}, {@uid_gt={'uid>', r14}}, {@fowner_gt={'fowner>', 0xee00}}]}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r2) (async) r16 = dup(r2) write$FUSE_DIRENTPLUS(r16, &(0x7f0000000880)=ANY=[@ANYBLOB], 0xa8) write$FUSE_CREATE_OPEN(r16, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2605.178739][T12222] dump_stack_lvl+0x1e2/0x24b [ 2605.183247][T12222] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2605.188539][T12222] dump_stack+0x15/0x17 [ 2605.192547][T12222] should_fail+0x3c6/0x510 [ 2605.196789][T12222] should_fail_alloc_page+0x52/0x60 [ 2605.201821][T12222] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2605.207041][T12222] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2605.210771][T12195] 9pnet: Insufficient options for proto=fd [ 2605.212408][T12222] ? _raw_spin_trylock_bh+0x190/0x190 [ 2605.212419][T12222] ? _raw_spin_lock+0xa4/0x1b0 [ 2605.212436][T12222] ? _raw_spin_trylock_bh+0x190/0x190 [ 2605.225082][T12195] 9pnet: Insufficient options for proto=fd [ 2605.227855][T12222] pte_alloc_one+0x1f/0xc0 [ 2605.227868][T12222] __pte_alloc+0x75/0x2c0 [ 2605.227884][T12222] ? free_pgtables+0x3c0/0x3c0 [ 2605.242031][T12195] 9pnet: Insufficient options for proto=fd [ 2605.243003][T12222] ? slab_post_alloc_hook+0x61/0x2f0 [ 2605.243018][T12222] copy_page_range+0x29d8/0x3020 [ 2605.243036][T12222] ? kmem_cache_alloc+0x168/0x2e0 [ 2605.248432][T12195] 9pnet: Insufficient options for proto=fd [ 2605.251717][T12222] ? kernel_clone+0x21e/0x9e0 [ 2605.251732][T12222] ? do_syscall_64+0x34/0x70 [ 2605.251754][T12222] ? pfn_valid+0x1c0/0x1c0 [ 2605.290955][T12222] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2605.296500][T12222] ? _raw_write_unlock+0x2e/0x60 [ 2605.301281][T12222] copy_mm+0xc4a/0x13a0 [ 2605.305266][T12222] ? copy_signal+0x610/0x610 [ 2605.309692][T12222] ? __init_rwsem+0xd6/0x1c0 [ 2605.314118][T12222] ? copy_signal+0x4e3/0x610 [ 2605.318545][T12222] copy_process+0x1175/0x3340 [ 2605.323056][T12222] ? __switch_to+0x5f6/0x1240 [ 2605.327572][T12222] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2605.332524][T12222] ? copy_clone_args_from_user+0x744/0x830 [ 2605.338158][T12222] kernel_clone+0x21e/0x9e0 [ 2605.342495][T12222] ? __delayed_free_task+0x20/0x20 [ 2605.347445][T12222] ? create_io_thread+0x1e0/0x1e0 [ 2605.352325][T12222] __x64_sys_clone3+0x376/0x3a0 [ 2605.356993][T12222] ? __ia32_sys_clone+0x290/0x290 [ 2605.361880][T12222] do_syscall_64+0x34/0x70 [ 2605.366107][T12222] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2605.371831][T12222] RIP: 0033:0x7fe73cec4ba9 [ 2605.376086][T12222] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2605.395613][T12222] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2605.403857][T12222] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2605.411670][T12222] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2605.419480][T12222] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2605.427289][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2605.435110][T12222] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 [ 2605.501315][T12195] 9pnet: Insufficient options for proto=fd [ 2605.525936][T12195] 9pnet: Insufficient options for proto=fd 17:31:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='f2fs_filemap_fault\x00', r3}, 0x10) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x0, 0xed05, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x4}}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:06 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xb8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2605.644494][T12225] tmpfs: Bad value for 'mode' 17:31:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2605.667545][T12233] 9pnet: Insufficient options for proto=fd 17:31:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500b8e565ffff018000000800395032303030"], 0x15) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7ff}, [@ldst={0x3, 0x4, 0x1, 0x2, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x1, 0x4, 0x2, 0x6, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf8, &(0x7f00000004c0)=""/248, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x2, 0xfb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[r3], &(0x7f00000005c0)=[{0x4, 0x3, 0xb, 0x2}, {0x2, 0x1, 0xb, 0xe}, {0x5, 0x3, 0x6}, {0x1, 0xb15a, 0xb, 0x9}, {0x3, 0x2, 0x3, 0x8}, {0x0, 0x3, 0x1}, {0x0, 0x1, 0x3, 0x1}], 0x10, 0x935e}, 0x90) r5 = dup(r2) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r6 = getuid() mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x80000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef}, {@audit}, {@euid_gt={'euid>', r6}}]}}) r7 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201006) write$P9_RVERSION(r8, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0xf8, 0x8, '9P2000.u'}, 0x15) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r4 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) prlimit64(r5, 0xf, &(0x7f0000000040)={0x7, 0x100}, &(0x7f0000000080)) ioctl$BLKSECTGET(r4, 0x80041285, &(0x7f0000000000)) fallocate(r4, 0x8, 0x6, 0x9) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xe2, &(0x7f00000004c0)=""/226, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0xfffffffffffffdf5, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x20, 0x88}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r3, r3], &(0x7f00000005c0)=[{0x0, 0x5, 0x3, 0xc}, {0x3, 0x5, 0x6, 0x6}, {0x5, 0x1, 0x9, 0x7}, {0x5, 0x4, 0x10, 0x1}, {0x2, 0x1, 0x4, 0x3}, {0x5, 0x4, 0x7, 0x4}, {0x2, 0x2, 0x6, 0xb}, {0x1, 0x5, 0xb, 0xb}], 0x10, 0x3}, 0x90) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r6 = socket$inet(0x2, 0x5, 0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000700)={0x1, 0x7}) 17:31:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500b8e565ffff018000000800395032303030"], 0x15) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7ff}, [@ldst={0x3, 0x4, 0x1, 0x2, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x1, 0x4, 0x2, 0x6, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf8, &(0x7f00000004c0)=""/248, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x2, 0xfb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[r3], &(0x7f00000005c0)=[{0x4, 0x3, 0xb, 0x2}, {0x2, 0x1, 0xb, 0xe}, {0x5, 0x3, 0x6}, {0x1, 0xb15a, 0xb, 0x9}, {0x3, 0x2, 0x3, 0x8}, {0x0, 0x3, 0x1}, {0x0, 0x1, 0x3, 0x1}], 0x10, 0x935e}, 0x90) r5 = dup(r2) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r6 = getuid() mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x80000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef}, {@audit}, {@euid_gt={'euid>', r6}}]}}) r7 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201006) write$P9_RVERSION(r8, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0xf8, 0x8, '9P2000.u'}, 0x15) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500b8e565ffff018000000800395032303030"], 0x15) (async) open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (async) sendfile(r3, r4, 0x0, 0x1000000201006) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7ff}, [@ldst={0x3, 0x4, 0x1, 0x2, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x1, 0x4, 0x2, 0x6, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf8, &(0x7f00000004c0)=""/248, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x2, 0xfb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[r3], &(0x7f00000005c0)=[{0x4, 0x3, 0xb, 0x2}, {0x2, 0x1, 0xb, 0xe}, {0x5, 0x3, 0x6}, {0x1, 0xb15a, 0xb, 0x9}, {0x3, 0x2, 0x3, 0x8}, {0x0, 0x3, 0x1}, {0x0, 0x1, 0x3, 0x1}], 0x10, 0x935e}, 0x90) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) getuid() (async) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x80000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef}, {@audit}, {@euid_gt={'euid>', r6}}]}}) (async) open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (async) sendfile(r7, r8, 0x0, 0x1000000201006) (async) write$P9_RVERSION(r8, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0xf8, 0x8, '9P2000.u'}, 0x15) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) (async) 17:31:06 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xffff0300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) r4 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) prlimit64(r5, 0xf, &(0x7f0000000040)={0x7, 0x100}, &(0x7f0000000080)) (async) ioctl$BLKSECTGET(r4, 0x80041285, &(0x7f0000000000)) (async) fallocate(r4, 0x8, 0x6, 0x9) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xe2, &(0x7f00000004c0)=""/226, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0xfffffffffffffdf5, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x20, 0x88}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r3, r3], &(0x7f00000005c0)=[{0x0, 0x5, 0x3, 0xc}, {0x3, 0x5, 0x6, 0x6}, {0x5, 0x1, 0x9, 0x7}, {0x5, 0x4, 0x10, 0x1}, {0x2, 0x1, 0x4, 0x3}, {0x5, 0x4, 0x7, 0x4}, {0x2, 0x2, 0x6, 0xb}, {0x1, 0x5, 0xb, 0xb}], 0x10, 0x3}, 0x90) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r6 = socket$inet(0x2, 0x5, 0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000700)={0x1, 0x7}) 17:31:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500b8e565ffff018000000800395032303030"], 0x15) (async) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7ff}, [@ldst={0x3, 0x4, 0x1, 0x2, 0xb, 0xfffffffffffffffc, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x1, 0x4, 0x2, 0x6, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf8, &(0x7f00000004c0)=""/248, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x2, 0xfb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[r3], &(0x7f00000005c0)=[{0x4, 0x3, 0xb, 0x2}, {0x2, 0x1, 0xb, 0xe}, {0x5, 0x3, 0x6}, {0x1, 0xb15a, 0xb, 0x9}, {0x3, 0x2, 0x3, 0x8}, {0x0, 0x3, 0x1}, {0x0, 0x1, 0x3, 0x1}], 0x10, 0x935e}, 0x90) (async) r5 = dup(r2) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r6 = getuid() mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x80000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef}, {@audit}, {@euid_gt={'euid>', r6}}]}}) (async, rerun: 32) r7 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async, rerun: 32) r8 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201006) (async, rerun: 64) write$P9_RVERSION(r8, &(0x7f00000003c0)={0x15, 0x65, 0xffff, 0xf8, 0x8, '9P2000.u'}, 0x15) (async, rerun: 64) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) (rerun: 64) 17:31:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 17:31:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}}}, 0xa0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pread64(r3, &(0x7f00000004c0)=""/233, 0xe9, 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r4 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) prlimit64(r5, 0xf, &(0x7f0000000040)={0x7, 0x100}, &(0x7f0000000080)) ioctl$BLKSECTGET(r4, 0x80041285, &(0x7f0000000000)) fallocate(r4, 0x8, 0x6, 0x9) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xe2, &(0x7f00000004c0)=""/226, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0xfffffffffffffdf5, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x20, 0x88}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r3, r3], &(0x7f00000005c0)=[{0x0, 0x5, 0x3, 0xc}, {0x3, 0x5, 0x6, 0x6}, {0x5, 0x1, 0x9, 0x7}, {0x5, 0x4, 0x10, 0x1}, {0x2, 0x1, 0x4, 0x3}, {0x5, 0x4, 0x7, 0x4}, {0x2, 0x2, 0x6, 0xb}, {0x1, 0x5, 0xb, 0xb}], 0x10, 0x3}, 0x90) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r6 = socket$inet(0x2, 0x5, 0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000700)={0x1, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) getpid() (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) (async) prlimit64(r5, 0xf, &(0x7f0000000040)={0x7, 0x100}, &(0x7f0000000080)) (async) ioctl$BLKSECTGET(r4, 0x80041285, &(0x7f0000000000)) (async) fallocate(r4, 0x8, 0x6, 0x9) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xe2, &(0x7f00000004c0)=""/226, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0xfffffffffffffdf5, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x20, 0x88}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r3, r3], &(0x7f00000005c0)=[{0x0, 0x5, 0x3, 0xc}, {0x3, 0x5, 0x6, 0x6}, {0x5, 0x1, 0x9, 0x7}, {0x5, 0x4, 0x10, 0x1}, {0x2, 0x1, 0x4, 0x3}, {0x5, 0x4, 0x7, 0x4}, {0x2, 0x2, 0x6, 0xb}, {0x1, 0x5, 0xb, 0xb}], 0x10, 0x3}, 0x90) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) socket$inet(0x2, 0x5, 0x8) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000700)={0x1, 0x7}) (async) 17:31:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}}}, 0xa0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pread64(r3, &(0x7f00000004c0)=""/233, 0xe9, 0x4) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:07 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xb8, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r1) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2605.990406][T12283] FAULT_INJECTION: forcing a failure. [ 2605.990406][T12283] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.002860][T12283] CPU: 1 PID: 12283 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2606.012964][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2606.022864][T12283] Call Trace: [ 2606.025995][T12283] dump_stack_lvl+0x1e2/0x24b [ 2606.030497][T12283] ? panic+0x80b/0x80b [ 2606.034403][T12283] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2606.039699][T12283] dump_stack+0x15/0x17 [ 2606.043695][T12283] should_fail+0x3c6/0x510 [ 2606.047948][T12283] ? anon_vma_clone+0x9a/0x500 [ 2606.052544][T12283] __should_failslab+0xa4/0xe0 [ 2606.057144][T12283] should_failslab+0x9/0x20 [ 2606.061488][T12283] kmem_cache_alloc+0x3d/0x2e0 [ 2606.066082][T12283] anon_vma_clone+0x9a/0x500 [ 2606.070511][T12283] anon_vma_fork+0x91/0x4e0 [ 2606.074850][T12283] ? anon_vma_name+0x4c/0x70 [ 2606.079281][T12283] ? vm_area_dup+0x1a1/0x270 [ 2606.083702][T12283] copy_mm+0x95a/0x13a0 [ 2606.087697][T12283] ? copy_signal+0x610/0x610 [ 2606.092296][T12283] ? __init_rwsem+0xd6/0x1c0 [ 2606.096719][T12283] ? copy_signal+0x4e3/0x610 [ 2606.101146][T12283] copy_process+0x1175/0x3340 [ 2606.105663][T12283] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2606.110611][T12283] ? kernel_clone+0x1fa/0x9e0 [ 2606.115121][T12283] kernel_clone+0x21e/0x9e0 [ 2606.119461][T12283] ? __delayed_free_task+0x20/0x20 [ 2606.124408][T12283] ? create_io_thread+0x1e0/0x1e0 [ 2606.129268][T12283] ? kernel_write+0x3d0/0x3d0 [ 2606.133781][T12283] __x64_sys_clone3+0x376/0x3a0 [ 2606.138467][T12283] ? __ia32_sys_clone+0x290/0x290 [ 2606.143333][T12283] ? __kasan_check_read+0x11/0x20 [ 2606.148191][T12283] do_syscall_64+0x34/0x70 [ 2606.152448][T12283] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2606.158168][T12283] RIP: 0033:0x7fe73cec4ba9 [ 2606.162423][T12283] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2606.181861][T12283] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2606.190106][T12283] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2606.197922][T12283] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2606.205729][T12283] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2606.213539][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2606.221358][T12283] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:07 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}}}, 0xa0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pread64(r3, &(0x7f00000004c0)=""/233, 0xe9, 0x4) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:07 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006c40)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x6, 0x200) r5 = fspick(0xffffffffffffffff, &(0x7f0000006c80)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000006cc0)={r0, 0x1f, 0x8, 0x3}) statx(0xffffffffffffff9c, &(0x7f0000006d00)='./file0\x00', 0x0, 0x10, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r10) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = getpid() r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r12, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}], 0x20}}], 0x1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000006f00)='./file0\x00', 0x400, 0x400, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007180)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="e6db2a1a6a6574551175976f4cd1526e2d4379fc038823a88220e1bfce5bfa81dd20c79ba9418301334a7a3c25af397a0587318bd1797b", 0x37}], 0x1, &(0x7f0000000500)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006a80)="87d6efcc7dbc29645519177065d68211edb570b6d7bcdf0a8de7f0ad", 0x1c}, {&(0x7f0000000340)="cb7c08be5e750f135eea3fa55a0a5e4dafb2", 0x12}, {&(0x7f0000006b00)="e7c4ab33d2b442c5c60238ac2b7a9d14aa34b65276fdb39ec967ff251c0dca3d3d33f1384c48b8494476a8cbeca20268b8e6aea2c01d40e817d58d057e25b47d17f958e9fef78df368f2e1c7045904b4e940e8dcbe4e2a9c50a5310e346e66ad983e27d4f2404bb2b813ba03b20f35dda00dff51a8dbdabecffcccc00730b169674a341cdae9acbf6c1213f0cf711bcded107072bc8584332464b5a49159bd970c12e6105cc481c26533150bb93240be68", 0xb1}, {&(0x7f0000006bc0)="58ab505d5c2f4e22", 0x8}], 0x4, &(0x7f0000007040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r2, r3, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r15, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, r18}}}], 0x130, 0x40040}}], 0x400000000000350, 0x20004000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r20, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r21 = dup(r20) write$FUSE_DIRENTPLUS(r21, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r21, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$KVM_RUN(r21, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r19}, 0x2c, {'wfdno', 0x3d, r20}}) 17:31:07 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006c40)={0xffffffffffffffff}) (async) r4 = socket$inet(0x2, 0x6, 0x200) r5 = fspick(0xffffffffffffffff, &(0x7f0000006c80)='./file0\x00', 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000006cc0)={r0, 0x1f, 0x8, 0x3}) (rerun: 32) statx(0xffffffffffffff9c, &(0x7f0000006d00)='./file0\x00', 0x0, 0x10, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r10) (async) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r13 = getpid() r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r12, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}], 0x20}}], 0x1, 0x0) (async, rerun: 32) statx(0xffffffffffffff9c, &(0x7f0000006f00)='./file0\x00', 0x400, 0x400, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r18 = getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007180)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="e6db2a1a6a6574551175976f4cd1526e2d4379fc038823a88220e1bfce5bfa81dd20c79ba9418301334a7a3c25af397a0587318bd1797b", 0x37}], 0x1, &(0x7f0000000500)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006a80)="87d6efcc7dbc29645519177065d68211edb570b6d7bcdf0a8de7f0ad", 0x1c}, {&(0x7f0000000340)="cb7c08be5e750f135eea3fa55a0a5e4dafb2", 0x12}, {&(0x7f0000006b00)="e7c4ab33d2b442c5c60238ac2b7a9d14aa34b65276fdb39ec967ff251c0dca3d3d33f1384c48b8494476a8cbeca20268b8e6aea2c01d40e817d58d057e25b47d17f958e9fef78df368f2e1c7045904b4e940e8dcbe4e2a9c50a5310e346e66ad983e27d4f2404bb2b813ba03b20f35dda00dff51a8dbdabecffcccc00730b169674a341cdae9acbf6c1213f0cf711bcded107072bc8584332464b5a49159bd970c12e6105cc481c26533150bb93240be68", 0xb1}, {&(0x7f0000006bc0)="58ab505d5c2f4e22", 0x8}], 0x4, &(0x7f0000007040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r2, r3, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r15, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, r18}}}], 0x130, 0x40040}}], 0x400000000000350, 0x20004000) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r20, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r21 = dup(r20) write$FUSE_DIRENTPLUS(r21, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r21, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$KVM_RUN(r21, 0xae80, 0x0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r19}, 0x2c, {'wfdno', 0x3d, r20}}) (rerun: 64) 17:31:07 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xffff1f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:07 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x90, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:07 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='snd_soc_jack_irq\x00', r0}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="12d15776bd72d4febe863051a72933db32985bbeb696489e6af1cc0c16cb58b6890f75610c2546bef80000"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x4000) r5 = accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14, 0x80000) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) sendfile(r7, r8, &(0x7f0000000500)=0xa76d, 0x2) ftruncate(r6, 0x2007ffb) write$P9_RSETATTR(r6, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) ftruncate(r5, 0x2) 17:31:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) 17:31:07 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='snd_soc_jack_irq\x00', r0}, 0x10) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="12d15776bd72d4febe863051a72933db32985bbeb696489e6af1cc0c16cb58b6890f75610c2546bef80000"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) (async) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x4000) r5 = accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14, 0x80000) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) (async) sendfile(r7, r8, &(0x7f0000000500)=0xa76d, 0x2) (async) ftruncate(r6, 0x2007ffb) (async) write$P9_RSETATTR(r6, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) (async) ftruncate(r5, 0x2) [ 2606.844509][T12342] FAULT_INJECTION: forcing a failure. [ 2606.844509][T12342] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.856988][T12342] CPU: 1 PID: 12342 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2606.867079][T12342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2606.876978][T12342] Call Trace: [ 2606.880125][T12342] dump_stack_lvl+0x1e2/0x24b [ 2606.884615][T12342] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2606.889908][T12342] ? pfn_valid+0x1c0/0x1c0 [ 2606.894164][T12342] dump_stack+0x15/0x17 [ 2606.898156][T12342] should_fail+0x3c6/0x510 [ 2606.902404][T12342] ? vm_area_dup+0x26/0x270 [ 2606.906746][T12342] __should_failslab+0xa4/0xe0 [ 2606.911349][T12342] should_failslab+0x9/0x20 [ 2606.915697][T12342] kmem_cache_alloc+0x3d/0x2e0 [ 2606.920287][T12342] vm_area_dup+0x26/0x270 [ 2606.924467][T12342] copy_mm+0x8ac/0x13a0 [ 2606.928440][T12342] ? irqentry_exit+0x4f/0x60 [ 2606.932880][T12342] ? copy_signal+0x610/0x610 [ 2606.937293][T12342] ? __init_rwsem+0xd6/0x1c0 [ 2606.941727][T12342] ? copy_signal+0x4e3/0x610 [ 2606.946148][T12342] copy_process+0x1175/0x3340 [ 2606.950659][T12342] ? copy_oom_score_adj+0x261/0x280 [ 2606.955690][T12342] ? copy_clone_args_from_user+0x99/0x830 [ 2606.961252][T12342] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2606.966202][T12342] ? copy_clone_args_from_user+0x744/0x830 [ 2606.971834][T12342] kernel_clone+0x21e/0x9e0 [ 2606.976175][T12342] ? __delayed_free_task+0x20/0x20 [ 2606.981126][T12342] ? create_io_thread+0x1e0/0x1e0 [ 2606.985988][T12342] ? __this_cpu_preempt_check+0x13/0x20 [ 2606.991371][T12342] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2606.997874][T12342] __x64_sys_clone3+0x376/0x3a0 [ 2607.002562][T12342] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2607.007597][T12342] ? __ia32_sys_clone+0x290/0x290 [ 2607.012465][T12342] ? __kasan_check_read+0x11/0x20 [ 2607.017320][T12342] do_syscall_64+0x34/0x70 [ 2607.021568][T12342] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2607.027291][T12342] RIP: 0033:0x7fe73cec4ba9 [ 2607.031548][T12342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2607.050990][T12342] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2607.059234][T12342] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2607.067043][T12342] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2607.074855][T12342] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2607.082666][T12342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.090479][T12342] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006c40)={0xffffffffffffffff}) (rerun: 32) r4 = socket$inet(0x2, 0x6, 0x200) (async) r5 = fspick(0xffffffffffffffff, &(0x7f0000006c80)='./file0\x00', 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000006cc0)={r0, 0x1f, 0x8, 0x3}) (async) statx(0xffffffffffffff9c, &(0x7f0000006d00)='./file0\x00', 0x0, 0x10, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000006e40)='./file0\x00', &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r10) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = getpid() (async) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r12, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}], 0x20}}], 0x1, 0x0) (async) statx(0xffffffffffffff9c, &(0x7f0000006f00)='./file0\x00', 0x400, 0x400, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007180)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000000c0)="e6db2a1a6a6574551175976f4cd1526e2d4379fc038823a88220e1bfce5bfa81dd20c79ba9418301334a7a3c25af397a0587318bd1797b", 0x37}], 0x1, &(0x7f0000000500)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006a80)="87d6efcc7dbc29645519177065d68211edb570b6d7bcdf0a8de7f0ad", 0x1c}, {&(0x7f0000000340)="cb7c08be5e750f135eea3fa55a0a5e4dafb2", 0x12}, {&(0x7f0000006b00)="e7c4ab33d2b442c5c60238ac2b7a9d14aa34b65276fdb39ec967ff251c0dca3d3d33f1384c48b8494476a8cbeca20268b8e6aea2c01d40e817d58d057e25b47d17f958e9fef78df368f2e1c7045904b4e940e8dcbe4e2a9c50a5310e346e66ad983e27d4f2404bb2b813ba03b20f35dda00dff51a8dbdabecffcccc00730b169674a341cdae9acbf6c1213f0cf711bcded107072bc8584332464b5a49159bd970c12e6105cc481c26533150bb93240be68", 0xb1}, {&(0x7f0000006bc0)="58ab505d5c2f4e22", 0x8}], 0x4, &(0x7f0000007040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r2, r3, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r15, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, r18}}}], 0x130, 0x40040}}], 0x400000000000350, 0x20004000) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r20, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r21 = dup(r20) write$FUSE_DIRENTPLUS(r21, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r21, &(0x7f0000000400)={0xa0}, 0xa0) ioctl$KVM_RUN(r21, 0xae80, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r19}, 0x2c, {'wfdno', 0x3d, r20}}) 17:31:08 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x90, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='snd_soc_jack_irq\x00', r0}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="12d15776bd72d4febe863051a72933db32985bbeb696489e6af1cc0c16cb58b6890f75610c2546bef80000"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) (async) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x4000) r5 = accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14, 0x80000) (async) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) sendfile(r7, r8, &(0x7f0000000500)=0xa76d, 0x2) (async) ftruncate(r6, 0x2007ffb) (async) write$P9_RSETATTR(r6, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) (async) ftruncate(r5, 0x2) 17:31:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) creat(&(0x7f0000000040)='./file0\x00', 0xbe) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x12001, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@posixacl}, {@access_any}], [{@flag='posixacl'}, {@subj_user={'subj_user', 0x3d, '}!-'}}, {@smackfshat={'smackfshat', 0x3d, '@/,-'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {0x0, 0x20}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66ed", 0x69}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) creat(&(0x7f0000000040)='./file0\x00', 0xbe) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x12001, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@posixacl}, {@access_any}], [{@flag='posixacl'}, {@subj_user={'subj_user', 0x3d, '}!-'}}, {@smackfshat={'smackfshat', 0x3d, '@/,-'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {0x0, 0x20}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x68001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x19, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x73}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x51, &(0x7f0000000340)=""/81, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x3f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], 0x0, 0x10, 0x1}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) readlinkat(r2, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)=""/58, 0x3a) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:31:08 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xffffff7f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) creat(&(0x7f0000000040)='./file0\x00', 0xbe) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x12001, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@posixacl}, {@access_any}], [{@flag='posixacl'}, {@subj_user={'subj_user', 0x3d, '}!-'}}, {@smackfshat={'smackfshat', 0x3d, '@/,-'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {0x0, 0x20}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x68001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x19, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x73}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x51, &(0x7f0000000340)=""/81, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x3f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], 0x0, 0x10, 0x1}, 0x90) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 64) readlinkat(r2, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)=""/58, 0x3a) (async, rerun: 64) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 17:31:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) 17:31:08 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x70, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:08 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x80041285, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000008c0)={{r1}, r3, 0x6, @unused=[0x4, 0x6, 0x9], @subvolid=0x20}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}]}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) [ 2607.701755][T12393] FAULT_INJECTION: forcing a failure. [ 2607.701755][T12393] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.714295][T12393] CPU: 0 PID: 12393 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2607.714317][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2607.734305][T12393] Call Trace: [ 2607.737450][T12393] dump_stack_lvl+0x1e2/0x24b [ 2607.741943][T12393] ? panic+0x80b/0x80b [ 2607.745845][T12393] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2607.751147][T12393] dump_stack+0x15/0x17 [ 2607.755131][T12393] should_fail+0x3c6/0x510 [ 2607.759386][T12393] ? anon_vma_fork+0x1df/0x4e0 [ 2607.763985][T12393] __should_failslab+0xa4/0xe0 [ 2607.768597][T12393] should_failslab+0x9/0x20 [ 2607.772926][T12393] kmem_cache_alloc+0x3d/0x2e0 [ 2607.777524][T12393] ? anon_vma_fork+0xf7/0x4e0 [ 2607.782038][T12393] anon_vma_fork+0x1df/0x4e0 [ 2607.786462][T12393] copy_mm+0x95a/0x13a0 [ 2607.790457][T12393] ? copy_signal+0x610/0x610 [ 2607.794881][T12393] ? __init_rwsem+0xd6/0x1c0 [ 2607.799307][T12393] ? copy_signal+0x4e3/0x610 [ 2607.803774][T12393] copy_process+0x1175/0x3340 [ 2607.808272][T12393] ? memset+0x35/0x40 [ 2607.812130][T12393] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2607.817017][T12393] ? copy_clone_args_from_user+0x744/0x830 [ 2607.822671][T12393] kernel_clone+0x21e/0x9e0 [ 2607.827010][T12393] ? __delayed_free_task+0x20/0x20 [ 2607.831973][T12393] ? create_io_thread+0x1e0/0x1e0 [ 2607.836805][T12393] ? kernel_write+0x3d0/0x3d0 [ 2607.841333][T12393] __x64_sys_clone3+0x376/0x3a0 [ 2607.846002][T12393] ? __ia32_sys_clone+0x290/0x290 [ 2607.850863][T12393] ? ksys_write+0x260/0x2c0 [ 2607.855208][T12393] ? debug_smp_processor_id+0x17/0x20 [ 2607.860412][T12393] do_syscall_64+0x34/0x70 [ 2607.864663][T12393] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2607.870389][T12393] RIP: 0033:0x7fe73cec4ba9 [ 2607.874645][T12393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2607.894085][T12393] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2607.902356][T12393] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2607.910138][T12393] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2607.917953][T12393] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2607.925775][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.933575][T12393] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x68001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x19, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x73}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x51, &(0x7f0000000340)=""/81, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x3f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], 0x0, 0x10, 0x1}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) readlinkat(r2, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)=""/58, 0x3a) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r1, 0x2007ffb) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x68001, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x19, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x73}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x51, &(0x7f0000000340)=""/81, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x3f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2], 0x0, 0x10, 0x1}, 0x90) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) readlinkat(r2, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)=""/58, 0x3a) (async) dup(r4) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) 17:31:09 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x70, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:09 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x80041285, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000008c0)={{r1}, r3, 0x6, @unused=[0x4, 0x6, 0x9], @subvolid=0x20}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}]}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) ioctl$BLKSECTGET(r1, 0x80041285, &(0x7f0000000000)) (async) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) (async) sendfile(r1, r2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000008c0)={{r1}, r3, 0x6, @unused=[0x4, 0x6, 0x9], @subvolid=0x20}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}]}}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) (async) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) (async) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) (async) 17:31:09 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x80041285, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000008c0)={{r1}, r3, 0x6, @unused=[0x4, 0x6, 0x9], @subvolid=0x20}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}]}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) ioctl$BLKSECTGET(r1, 0x80041285, &(0x7f0000000000)) (async) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async) ioctl$BLKSECTGET(r2, 0x80041285, &(0x7f0000000000)) (async) sendfile(r1, r2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000008c0)={{r1}, r3, 0x6, @unused=[0x4, 0x6, 0x9], @subvolid=0x20}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}]}}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) (async) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) (async) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) (async) 17:31:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="d60e135a2c19c17ca2b688e9623b35680ad966de46d2294fcc0ca523aab8e691e8fbc0be0af8fa6d2ab686d17c4fe318138c93ea4aa8199297f10ae26c4cb480107f3ed51a347d41b28a0371fe1e6572a201fdbc9432a389c33a6a3aad192717e7e6eacb8faef8d0ed6116ae49fa88dee903a0f389dae1b4fa3d3a39fafcee5739f2131a736bc093fc90be1263070bc73a48fdbb8d74786d0e0e44e598b78356b1a7dc812ca06585277386ac7d949f84b6d91caea81456ee2798250f934873e2bdd45d083383be3de031fb9fb7279ece5366a2cbd873c3cd8a9fecf401f8b8a0332d9ea02efb178648ca52c3b3b127dd7e0014faf1070332ca6866", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66ed", 0x69}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f0000000080)=[{r1, 0x480}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={[0x6]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x8, &(0x7f0000000380)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x69}}], &(0x7f00000003c0)='syzkaller\x00', 0x100, 0x14, &(0x7f00000004c0)=""/20, 0x41000, 0x41, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x93, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000005c0)=[{0x2, 0x5, 0x10, 0x9}, {0x3, 0x2, 0x0, 0x1}, {0x3, 0x5, 0x7}, {0x5, 0x4, 0x9, 0x4}, {0x3, 0x4, 0xc, 0x5}, {0x3, 0x5, 0xe}, {0x5, 0x1, 0xb, 0x7}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x3}, 0x90) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15) r6 = dup(r3) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xfffffffeffffffff) ioctl$KDSETLED(r7, 0x4b32, 0x200) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) r10 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r10, 0x80041285, &(0x7f0000000000)) r11 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r11, 0x80041285, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000b40)=ANY=[@ANYRES64=r8, @ANYRES16=r9, @ANYRESOCT=r10, @ANYRES8=r11, @ANYRES64=r7, @ANYRESOCT=r8, @ANYRES32=r5, @ANYBLOB="dca6d30262efdacbe934d4adf0b86901b3e53ee4ffc85ad0b02543e875498fb9377e7b5f3c0d96f3d9a8b69d4123465111b6dca479147b924b4007fad1c628e53df1875949b12453ad7a2318a8607a47f71f967e78752d6aa2a9a7e5e1c84c7f8259450e7c4032c30d30caeb13fa814a1518f8db1df7b2138b5e26aa5e3cf45938bc2d1ba061c395b92ca7e6902fe79bdb4fac461cc64c7301c27fdeed9c30ff6fb57354dcad769079a5425c694338e8721cbe49fc2ccce621c0", @ANYRESHEX=r11], 0xa8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) r12 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r12, r13, 0x0, 0x1000000201005) write$P9_RLERRORu(r12, &(0x7f0000000340)={0x17, 0x7, 0x1, {{0xa, 'syzkaller\x00'}, 0x5}}, 0x17) pwritev(r6, &(0x7f00000009c0)=[{&(0x7f0000000700)="05741bf919bd0b0e65037e6daa166a86bfb8e350d372995b95ce94b247f771fc8f21fec86b22d7d1f720c3885cf7fce59fcd4d3551c6b3d7542ec4782d894b95ed2e2adef04272091f659bd0ee8b3f7fe6fb81e70a3bd2bc05f5828ff72775b1eeaa2ca1b0ccb319edd63283e733f17a9e7aef105d52618d99b64a9d48404058e2ae70f2772eff4eb14288d601f58d9bd59ff535", 0x94}, {&(0x7f00000007c0)="865fe82c9da327c9f4a404fb131f50028e68655f1c8fe521fc7faf22be74e429eb614c85c35157139aace4b9f2ef0f6c4a241cf83022bd8a5177ef8dd720a5d94104f845f732eda1bfd126b16358c8d377e271631dac3dabd1c515cd3a990bb1c468fd2c90392bf2157bcf0f5a1baaf3a4ccb40c", 0x74}, {&(0x7f00000008c0)="ef2aafb6bc977cf84be787f91f6c9007a391a321aabf3bd0549b79ab9a37c77f409dddaf55308839e1de2157fb73c8d8c65ba0f61d29d916999a7f9d12648d87912963696b7a5c7666d3ffa2a845c33384c5edddf6a085a0c9097f74bbe5f6425636999fdc36b04e8595cddb172bd3", 0x6f}, {&(0x7f0000000940)="99da37636f2ad0db8a9b8116994016f36519a2547be53269b1aeecce8eb69953b847f227e99e879d94978d3c9039380d3cb2818f737a2f0eae37021ec729dcf30d9ecabc373ddfa85bc595352d669a48b5bf7ab47256439589e203413a2b6a38e91a314a3785663b76cb1f8a3076b393363d0cf5", 0x74}, {&(0x7f0000001380)="061859be3e11376a3e4695f8d53327ffa29c3c56823b24b75296a2ead33f5aea92b55eda964784c581883178244d8d655687a45e9666f3b7860410841f22082b795447e342fa5277f893e864af8214cc7be18a14effd11b46c062bea8b4196d2581eefa02eefb41c969e7f6284376785ccd77d10535b2db9437dd12ec9131efb5ed8142602dc683ee5579867475887207cb590647422d003ae42e70f882a220124094f14afa0e5d504228ff89396eeee52ce4c7fdb59cd35804f392ffd63bc5a8c921627856405ea27b86854325c27931ce4e0bae951b8a47a6dfdaf280e98ca795fa663dd756ebf7df625b2f1e371a5f5d712b80537c8c73fd7df4f633eac0cc523a269c3b2f96a589832502c463d322d6b77764d233333eaed68536cba5d1360ef22ffa8d94fbe64374f95dae2aca40fafae8ffd54d1d53d71150998c926ce6a4fcd9b918408b289adb673dde7f57f0eebb7649080a6233c0e6123fdba34d934780d1a4d1bf026303b15850636353b9e0d2aa9fa9ededfcb4c5a17df7d824f0cc6f6eaa15bffbf5d6527916a9a68b9750a734ced821d051c94acc9ef803a6641d4b1032c4de82ca3a45f10e89fc3bc80c11cb3a137310f386e8d0a550afdc1eef57791420edd92235d45dab49d2cc6da004dfc1dc8ba3b84c7949f0581e1bc61f8fc0c8e07602d3e55a4601e52de735415e1bcfd1d8c612497987a2ed616da56a4c4e046bbd11c7f87ca063902c649a05db1dff9fceb07a70b1ac2c3a6754ce0656d963d77ff264188b8248baa9a056e2584572c0e73977423b104073025412ef1b2f0ca28bf09be57a260401d306244366e58cc07379be8c6baacae80acfc9868a9f575c7ebe46ad206375625b9d77671cf8f5671d342bdd226e9c56021c7f0fde7c1f07e646067fdc47e646ce2d9d7b1248d51941386c46eea46b372c6e20dbcedb5463ff9169904f95b4b044cb547cbe9a1013d015432ce8eeb527e711cdb70614ba35654c7adb8d01141bc8fca986c06cbed70c8210ff58c0feed2998a9eef2750d88507a0931c2fdbf78ca15e72f25c712e5f0a0e7025642d8a4053037da429915ce3f39084b48f2b101cc568a9a2239f3a13f1516bb9b6c76af55d53dcb6843743ffe712bf105f4c1eea399131c02057e7f61b7a943e37e13224741365148962cd9acdf08d9ad5a2e878d51b1940aab82793f0ffe19ea6069fec29f685e79f310ac57290341b16e6f2ecb2da680fdef719a9fbd5d1d22572f1b33819c698717768a530377a0c6801cb710530769f8de516c154a2d17d065d488b3b4d28a44cb51159479c347ae1c72ea9f2d4cdc5217d36ec633524fb27f61680de812e54e636bdf16431904854952187b9102906195cea81351f1308cfb08ec40c9c908f56a726ed2f25863786f6a9568b0f95113b14d3f68b233440e51f5b31f2e23324f689be178baeb3d0364dcd4efdd4c59a57cac88df22bfe11bee4350eddb45e203465ae18a615afb1946a6596bc385329b2a2fffe3b6bda53af64ce00a79b892dccae5e482459cf399f55331197c92846d0878059fcf28726140379fe532cbfdd20f073f9af7086aba4e0086536ca5337c6992df5cd1a9b4eddd98c6738933fd6a61c6e19cf3d5d8af7b11d8bb9a63f4aef9e86db3ca45b2b116f31f1b333212990570dd5cb13f974de477a79ed7f8397fc19bd49f52f62ee269048dba58a3c77ba964521d0cd072b327e1bd05754f2fee33da891342104b73119f5424eaa0d11c709db4fe29d1dd887331c719ee34db51da73c3974f493707e3a696f3999cc82c78254cc0c25272d9c3124a8e739ae1cc5f7c7bf6cbe7d41bb88cc3f6ad84426e5fa201d549fe3cf2300a1c5d8762064ec22d57639b60a3bc0823cff215b277b7a8b27069ecf87092ea7f16f5f198de69efb0e6957947f346729968715156d52d72d6a73ea80a61751251f3f66fccfe27c5b04654a1a293c730fd665b81280d86e0a9915088c2afa9afcc4c6f869545f2d8d138993637b956b2ad5919e1ebbc9adbd3954ccca3f31cef9e8070ccc74cce1b8eafed4adb1a07a7e34a46f736723c907de30d9294b78d4197dfbb50d9a1b6ed43f41f6a2a02d9e233154ea1eed64764be2d8c9ae2e6cb8fd8afb72c54a9af6ddcb2ff1b31a2336cfbe57bfc7889a6b2f0083d5a86e7538ade45c44065fed00fe6fb80231204f24b3b10229168e955383e82bf1fc06d1d6dc10864f94de5d83cf7c553c68a8b37fb2c4ae616906770c120f059cc0ed91326ad9c80eb66d63904d81b329d30f6c288ad9e452933d836f5c1299170a64b5813478935bdaafc51ca0ba5d9fe99265fc8733fdf4c41d03472b73ab7af9ccbda6d8a6929d0c3c337a6d09d480e2dfd95f69fc6b628197210e8cd637e3639c1aeb9f3c6d5bc7658c512d16354654f0533548f73b34ccaa95bc55b1996e5b58568083e46a6fc3aa2dbdf7fcac4a747729526180b68ef5e34037dced0f7e542d97dfbbaeebfa2a69dd02fc271f7d25da3fdbeaee3d2f94eedaf204b39743eb28f96bb148acd7425e84b32878f6b338969506808889e6817e1a84461f3f85095d53cd408309561c1571d2fb151d4cf5b437ebcc1f5e305da5a5675e1e5ef25a412fe69c236391af1e231f484b83f930316ccb9cd91262db3935e5e41a8ed95101ab9d4c33c01e01af037a371c7f57954c203e4d73e26b9f0095c03dbd0ffd82b9b5659d4c0c74142909251da1ac6184358c3fe2d8c7eec588b7bfa274a7a407eb0e8151d85c84ef67361c1cf52ecb6297034481265182c9193db9bba001b6ed6b427854875e3703ae27f0c1bbfbb49797cc6557e99c7cef9b1938560c0438746f122616287920e25511ce4a668172f9e998c2b44d4d0ab6f4169a3b51f3e9bd56a839c4f2fb0aa360d093dd028744f48ba3779f56b81f3e66278b9258521fffb06aae837b3e97809ceceec48715e22537fb76ff946e2744808bbcb5d4decb7a616c3575c891247bf89c83338e10120d7e77fea5f3e32a1949895320cc212b68a56919aff81e19c1c83a33559c1cbffaa0265e4f4e5cd7ac96038763620d7b5e6623fd4ed3c37649fd84653c93fa77a53639672a4bae757a8c351b35233e6d4f1568f619abe67e5b29180441569d7bb37413995a352befc272d7922fb60d3830181838bc14822b328f36de74183fea495267c9ac527b235506f652636c35f581553ea40ce986a9b9231687412b8ce6184ecf7b23818afab703649da58249e40f14d538fe22a9156f424543b0719748da108bf030ff26c8b4391d26447771e39d4b0c265b09c57bca6c241e883ea3c7972802cc2f3909337bc1d4c8dbd3056a0fbd16b725eb8f9890218388e3d45203a5ba3d5724b3f7261356eba036cad1fb3a07e9284752cb25899efcb2cb168059c2fdace9a139df9f97db4c80529422261c4d6e66e258a579ec1d69ff9c80af03309551ef1cad04211cef65e2839b8555b8d41cd58b8ddd5d949eab7d67b91c6e9ebbe104d02b0dc1b8900ffd1fcf2fef7c5f1260cc1b532c9fc6ec0eafae0ea285515666ac9f80222cc74f739b8316c2a3feb70516b9c7904c5e2c14f410cdba2a0d95217dd4d84c3170e3b8fbe9cf94d227cf20547f067962ed208092d34dac7b1359565e4fa4722eadfc00e3b12785b31c89e0788f372976db29dfe1402c087a69b16410f886b517e3a47b2b8c761737a94e19f4a859ec898d8f1e2e5c46ff54a880cb0473f5468ca6bbbed9d7be0f5a4ef302491fbe9b87e3e9c8a3be0ec687de7f887e0071098cb12a8e0a1e357f0a2dac2f65dfd15f3b83c910086877485d18c46efb5080e9fa78da1ed47b4c2a659dcac7b8aed17f19b873987194ad93d330d3c2c96eb7f7a61df1cb4a89e5851307d591fdef45ce8af2c4649a3b8f298fa2be61ae29f200c3a24d5071bd2a6c08a84ea53a6f16c91fb02c8c0696fbbbf8dc66e251c52e411c817a6237327d1dd09304aecc635233754a75240e99648309e6c029567f6fc9ec3a804f37a00c7ec5944b166be17bd701658b7119239c71d71be53633f4b28d306d2d8d4b1636ad5eb80ebd4d96a240d82d6be6a7b7738f660725729b7fa311f0ed2a35a07841561429e07eedad886588d1ea6c2f711f9820e53e240170e873d4a50a2e3f14a2ab129405db92437c3c75b0cfb2ccaee5cda80df9db696f134c210f4ca5e40dd2860574cfea598be9100b7d01bef3267ef2e4a3f4ef7bafd4e4d60459aa62438fe89bbc591b1594944195a3cfbde1cae2a783bff177cadc8eddaad67317f8bc62ab77fe09a0ba54a3df1d2ca2ead121c05a015a986a523e9132b98493b0278cebb48f15b1f16f2f22c3e0c8ffe21b54a01bd9b197d4dad9250ac4844794f33e88e1e21b468d45aaac0e8fd94930fe454291d01cfbf8b5eb03a79f51d827f42fe53f6f8f21fceffa84feeb5d81229d19d161baf3d98b9125e3d4b0bbe667cf774b46b636277af1a2f906ff106dbd08ee25bd696d803fce9220b71285d2cd1e57f7d3b4aac5b7b339995f4efe84eb6f6b1d1c14c3f815d318f894201a2cfa3f43c51d77f726ee83c35c9cdab12e7b012a0c272f853fd45d4fd176b7c63bdb96b136d940d8a53e0f394a5cc8c0ccfd69710916c61a45d71b869d21f2bf31dadb1749edd42fef57579b3cca6173e77b7f7004c0c43b6c04f13a3e9d57f84a76651d4b25f8cc22501924beaaeb2c1d0444d420bee462d87b602726c9e0d193496b00d9b423ae4294c41fa8b0fd89e8e1d082681884a07df5b637aa6fb1dd29baed29b14b391ec13568cbb52257cbdddfbdf0eade1cd67273c11e3ba18066bfb9541b37a1f4bfa1a6efe459591e26dff50033fa552c76607ef9606be5407f60a55d146dea52b583eb204969221c9ef6ecf1bac8cfef9ae0f8ab65c6cacc7c8bcf02a5187bd5238145ac7659d1c18b00d3b2b3d22c249c69c26d26d54c8904e6cff4438021500f042d82e6b45a48a1336b4cb54a57be7ffca6aef7ac1f01d3ee0c110b1c1caacbf5d71b98c313d2c271fe88c1e5f1facd0b59c66ae85dd9ad18cb8952f70a349326c690db4b491b59b63d9ce40f30c8ecbc9d00ee0994af44d77f47d3bcbb7b3d7eed0ff468bb6db08f75134ea75d7415260d7152fc528770a0e19d322edf178d41374a5917c89b53c8fadbad84b3a5d1891373f9fe6fa7eb7c056ca9a47af4cec7e1a2e4e11c6a7f49db0df43710538c947b8015ee1edd65bbd3338915dd707203a528a56ffbbe89af5eea9fa53e064dad39d723f10973f5c5eb1cd7fa385e1097d0f33064b2284e9e29e9d307d36eafae136b8f4a098da8f2d04afef988624c175a64662cd45cf7c2eebe1900ea8ed14ed2bfa29ec7df1a6f51c24489ff018436afe04856fb1d85be5e782e2731e0a2e1c9f0142ce32dfebcb1424ede5ce820bc8f1d2207c20e08291af696792690746883156151021057344cefd3bd4f086d2acbd64b4ad2547c4140f051ea83d6c1159974ac165a7a9e8a6b8d5d3b7c8c646c7da9ad1c5dc66eeb1f52a2f3f21b8492327188f76fc1e6c92e1827d37c80c722a33832a4e99bc5efc0d98d6789ddcc492809c8aec2eefdc9b5dce6a95abf9621589b28c5eca7c6468b569ba2997ded68badcd31420d9e7449d889bebdf5cc88215058d4649d451d582dc07b5160ed08459ee2ed2e519e707f3452075fb9210559df7c5e868306d9df303445326ffc2ca10bbcf4c6d54bc9c20032b04529f12bd6e1c29c4bb65d607600c8a13789ae27de115a6122278", 0x1000}], 0x5, 0x1, 0x7ff) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='@\x00']) 17:31:09 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xfffffff5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000340)={[{@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=fd,'}}, {@euid_gt={'euid>', 0xee00}}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:09 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x70, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2608.334059][T12431] 9pnet: Insufficient options for proto=fd 17:31:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) 17:31:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f0000000080)=[{r1, 0x480}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={[0x6]}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x8, &(0x7f0000000380)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x69}}], &(0x7f00000003c0)='syzkaller\x00', 0x100, 0x14, &(0x7f00000004c0)=""/20, 0x41000, 0x41, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x93, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000005c0)=[{0x2, 0x5, 0x10, 0x9}, {0x3, 0x2, 0x0, 0x1}, {0x3, 0x5, 0x7}, {0x5, 0x4, 0x9, 0x4}, {0x3, 0x4, 0xc, 0x5}, {0x3, 0x5, 0xe}, {0x5, 0x1, 0xb, 0x7}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x3}, 0x90) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15) (async, rerun: 64) r6 = dup(r3) (rerun: 64) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xfffffffeffffffff) ioctl$KDSETLED(r7, 0x4b32, 0x200) (async) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) (async, rerun: 64) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (rerun: 64) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) (async) r10 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r10, 0x80041285, &(0x7f0000000000)) r11 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r11, 0x80041285, &(0x7f0000000000)) (async) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) (async, rerun: 64) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000b40)=ANY=[@ANYRES64=r8, @ANYRES16=r9, @ANYRESOCT=r10, @ANYRES8=r11, @ANYRES64=r7, @ANYRESOCT=r8, @ANYRES32=r5, @ANYBLOB="dca6d30262efdacbe934d4adf0b86901b3e53ee4ffc85ad0b02543e875498fb9377e7b5f3c0d96f3d9a8b69d4123465111b6dca479147b924b4007fad1c628e53df1875949b12453ad7a2318a8607a47f71f967e78752d6aa2a9a7e5e1c84c7f8259450e7c4032c30d30caeb13fa814a1518f8db1df7b2138b5e26aa5e3cf45938bc2d1ba061c395b92ca7e6902fe79bdb4fac461cc64c7301c27fdeed9c30ff6fb57354dcad769079a5425c694338e8721cbe49fc2ccce621c0", @ANYRESHEX=r11], 0xa8) (async, rerun: 64) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) (async, rerun: 32) r12 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async, rerun: 32) r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r12, r13, 0x0, 0x1000000201005) (async) write$P9_RLERRORu(r12, &(0x7f0000000340)={0x17, 0x7, 0x1, {{0xa, 'syzkaller\x00'}, 0x5}}, 0x17) (async) pwritev(r6, &(0x7f00000009c0)=[{&(0x7f0000000700)="05741bf919bd0b0e65037e6daa166a86bfb8e350d372995b95ce94b247f771fc8f21fec86b22d7d1f720c3885cf7fce59fcd4d3551c6b3d7542ec4782d894b95ed2e2adef04272091f659bd0ee8b3f7fe6fb81e70a3bd2bc05f5828ff72775b1eeaa2ca1b0ccb319edd63283e733f17a9e7aef105d52618d99b64a9d48404058e2ae70f2772eff4eb14288d601f58d9bd59ff535", 0x94}, {&(0x7f00000007c0)="865fe82c9da327c9f4a404fb131f50028e68655f1c8fe521fc7faf22be74e429eb614c85c35157139aace4b9f2ef0f6c4a241cf83022bd8a5177ef8dd720a5d94104f845f732eda1bfd126b16358c8d377e271631dac3dabd1c515cd3a990bb1c468fd2c90392bf2157bcf0f5a1baaf3a4ccb40c", 0x74}, {&(0x7f00000008c0)="ef2aafb6bc977cf84be787f91f6c9007a391a321aabf3bd0549b79ab9a37c77f409dddaf55308839e1de2157fb73c8d8c65ba0f61d29d916999a7f9d12648d87912963696b7a5c7666d3ffa2a845c33384c5edddf6a085a0c9097f74bbe5f6425636999fdc36b04e8595cddb172bd3", 0x6f}, {&(0x7f0000000940)="99da37636f2ad0db8a9b8116994016f36519a2547be53269b1aeecce8eb69953b847f227e99e879d94978d3c9039380d3cb2818f737a2f0eae37021ec729dcf30d9ecabc373ddfa85bc595352d669a48b5bf7ab47256439589e203413a2b6a38e91a314a3785663b76cb1f8a3076b393363d0cf5", 0x74}, {&(0x7f0000001380)="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", 0x1000}], 0x5, 0x1, 0x7ff) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='@\x00']) 17:31:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000340)={[{@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=fd,'}}, {@euid_gt={'euid>', 0xee00}}]}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) [ 2608.406103][T12454] overlayfs: unrecognized mount option "smackfstransmute=trans=fd" or missing value [ 2608.450453][T12462] 9pnet: Insufficient options for proto=fd [ 2608.488017][T12470] overlayfs: unrecognized mount option "smackfstransmute=trans=fd" or missing value 17:31:09 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x70, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2608.550034][T12473] FAULT_INJECTION: forcing a failure. [ 2608.550034][T12473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2608.563075][T12473] CPU: 0 PID: 12473 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2608.573204][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2608.583089][T12473] Call Trace: [ 2608.586228][T12473] dump_stack_lvl+0x1e2/0x24b [ 2608.590750][T12473] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2608.596034][T12473] dump_stack+0x15/0x17 17:31:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) ppoll(&(0x7f0000000080)=[{r1, 0x480}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000180)={[0x6]}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x8, &(0x7f0000000380)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x69}}], &(0x7f00000003c0)='syzkaller\x00', 0x100, 0x14, &(0x7f00000004c0)=""/20, 0x41000, 0x41, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x1, 0x93, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000005c0)=[{0x2, 0x5, 0x10, 0x9}, {0x3, 0x2, 0x0, 0x1}, {0x3, 0x5, 0x7}, {0x5, 0x4, 0x9, 0x4}, {0x3, 0x4, 0xc, 0x5}, {0x3, 0x5, 0xe}, {0x5, 0x1, 0xb, 0x7}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x3}, 0x90) (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.L'}, 0x15) r6 = dup(r3) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xfffffffeffffffff) ioctl$KDSETLED(r7, 0x4b32, 0x200) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) (async) r10 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r10, 0x80041285, &(0x7f0000000000)) (async) r11 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r11, 0x80041285, &(0x7f0000000000)) (async) syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000b40)=ANY=[@ANYRES64=r8, @ANYRES16=r9, @ANYRESOCT=r10, @ANYRES8=r11, @ANYRES64=r7, @ANYRESOCT=r8, @ANYRES32=r5, @ANYBLOB="dca6d30262efdacbe934d4adf0b86901b3e53ee4ffc85ad0b02543e875498fb9377e7b5f3c0d96f3d9a8b69d4123465111b6dca479147b924b4007fad1c628e53df1875949b12453ad7a2318a8607a47f71f967e78752d6aa2a9a7e5e1c84c7f8259450e7c4032c30d30caeb13fa814a1518f8db1df7b2138b5e26aa5e3cf45938bc2d1ba061c395b92ca7e6902fe79bdb4fac461cc64c7301c27fdeed9c30ff6fb57354dcad769079a5425c694338e8721cbe49fc2ccce621c0", @ANYRESHEX=r11], 0xa8) (async) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000400)={0xa0}, 0xa0) (async) r12 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r13 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r12, r13, 0x0, 0x1000000201005) (async) write$P9_RLERRORu(r12, &(0x7f0000000340)={0x17, 0x7, 0x1, {{0xa, 'syzkaller\x00'}, 0x5}}, 0x17) (async) pwritev(r6, &(0x7f00000009c0)=[{&(0x7f0000000700)="05741bf919bd0b0e65037e6daa166a86bfb8e350d372995b95ce94b247f771fc8f21fec86b22d7d1f720c3885cf7fce59fcd4d3551c6b3d7542ec4782d894b95ed2e2adef04272091f659bd0ee8b3f7fe6fb81e70a3bd2bc05f5828ff72775b1eeaa2ca1b0ccb319edd63283e733f17a9e7aef105d52618d99b64a9d48404058e2ae70f2772eff4eb14288d601f58d9bd59ff535", 0x94}, {&(0x7f00000007c0)="865fe82c9da327c9f4a404fb131f50028e68655f1c8fe521fc7faf22be74e429eb614c85c35157139aace4b9f2ef0f6c4a241cf83022bd8a5177ef8dd720a5d94104f845f732eda1bfd126b16358c8d377e271631dac3dabd1c515cd3a990bb1c468fd2c90392bf2157bcf0f5a1baaf3a4ccb40c", 0x74}, {&(0x7f00000008c0)="ef2aafb6bc977cf84be787f91f6c9007a391a321aabf3bd0549b79ab9a37c77f409dddaf55308839e1de2157fb73c8d8c65ba0f61d29d916999a7f9d12648d87912963696b7a5c7666d3ffa2a845c33384c5edddf6a085a0c9097f74bbe5f6425636999fdc36b04e8595cddb172bd3", 0x6f}, {&(0x7f0000000940)="99da37636f2ad0db8a9b8116994016f36519a2547be53269b1aeecce8eb69953b847f227e99e879d94978d3c9039380d3cb2818f737a2f0eae37021ec729dcf30d9ecabc373ddfa85bc595352d669a48b5bf7ab47256439589e203413a2b6a38e91a314a3785663b76cb1f8a3076b393363d0cf5", 0x74}, {&(0x7f0000001380)="061859be3e11376a3e4695f8d53327ffa29c3c56823b24b75296a2ead33f5aea92b55eda964784c581883178244d8d655687a45e9666f3b7860410841f22082b795447e342fa5277f893e864af8214cc7be18a14effd11b46c062bea8b4196d2581eefa02eefb41c969e7f6284376785ccd77d10535b2db9437dd12ec9131efb5ed8142602dc683ee5579867475887207cb590647422d003ae42e70f882a220124094f14afa0e5d504228ff89396eeee52ce4c7fdb59cd35804f392ffd63bc5a8c921627856405ea27b86854325c27931ce4e0bae951b8a47a6dfdaf280e98ca795fa663dd756ebf7df625b2f1e371a5f5d712b80537c8c73fd7df4f633eac0cc523a269c3b2f96a589832502c463d322d6b77764d233333eaed68536cba5d1360ef22ffa8d94fbe64374f95dae2aca40fafae8ffd54d1d53d71150998c926ce6a4fcd9b918408b289adb673dde7f57f0eebb7649080a6233c0e6123fdba34d934780d1a4d1bf026303b15850636353b9e0d2aa9fa9ededfcb4c5a17df7d824f0cc6f6eaa15bffbf5d6527916a9a68b9750a734ced821d051c94acc9ef803a6641d4b1032c4de82ca3a45f10e89fc3bc80c11cb3a137310f386e8d0a550afdc1eef57791420edd92235d45dab49d2cc6da004dfc1dc8ba3b84c7949f0581e1bc61f8fc0c8e07602d3e55a4601e52de735415e1bcfd1d8c612497987a2ed616da56a4c4e046bbd11c7f87ca063902c649a05db1dff9fceb07a70b1ac2c3a6754ce0656d963d77ff264188b8248baa9a056e2584572c0e73977423b104073025412ef1b2f0ca28bf09be57a260401d306244366e58cc07379be8c6baacae80acfc9868a9f575c7ebe46ad206375625b9d77671cf8f5671d342bdd226e9c56021c7f0fde7c1f07e646067fdc47e646ce2d9d7b1248d51941386c46eea46b372c6e20dbcedb5463ff9169904f95b4b044cb547cbe9a1013d015432ce8eeb527e711cdb70614ba35654c7adb8d01141bc8fca986c06cbed70c8210ff58c0feed2998a9eef2750d88507a0931c2fdbf78ca15e72f25c712e5f0a0e7025642d8a4053037da429915ce3f39084b48f2b101cc568a9a2239f3a13f1516bb9b6c76af55d53dcb6843743ffe712bf105f4c1eea399131c02057e7f61b7a943e37e13224741365148962cd9acdf08d9ad5a2e878d51b1940aab82793f0ffe19ea6069fec29f685e79f310ac57290341b16e6f2ecb2da680fdef719a9fbd5d1d22572f1b33819c698717768a530377a0c6801cb710530769f8de516c154a2d17d065d488b3b4d28a44cb51159479c347ae1c72ea9f2d4cdc5217d36ec633524fb27f61680de812e54e636bdf16431904854952187b9102906195cea81351f1308cfb08ec40c9c908f56a726ed2f25863786f6a9568b0f95113b14d3f68b233440e51f5b31f2e23324f689be178baeb3d0364dcd4efdd4c59a57cac88df22bfe11bee4350eddb45e203465ae18a615afb1946a6596bc385329b2a2fffe3b6bda53af64ce00a79b892dccae5e482459cf399f55331197c92846d0878059fcf28726140379fe532cbfdd20f073f9af7086aba4e0086536ca5337c6992df5cd1a9b4eddd98c6738933fd6a61c6e19cf3d5d8af7b11d8bb9a63f4aef9e86db3ca45b2b116f31f1b333212990570dd5cb13f974de477a79ed7f8397fc19bd49f52f62ee269048dba58a3c77ba964521d0cd072b327e1bd05754f2fee33da891342104b73119f5424eaa0d11c709db4fe29d1dd887331c719ee34db51da73c3974f493707e3a696f3999cc82c78254cc0c25272d9c3124a8e739ae1cc5f7c7bf6cbe7d41bb88cc3f6ad84426e5fa201d549fe3cf2300a1c5d8762064ec22d57639b60a3bc0823cff215b277b7a8b27069ecf87092ea7f16f5f198de69efb0e6957947f346729968715156d52d72d6a73ea80a61751251f3f66fccfe27c5b04654a1a293c730fd665b81280d86e0a9915088c2afa9afcc4c6f869545f2d8d138993637b956b2ad5919e1ebbc9adbd3954ccca3f31cef9e8070ccc74cce1b8eafed4adb1a07a7e34a46f736723c907de30d9294b78d4197dfbb50d9a1b6ed43f41f6a2a02d9e233154ea1eed64764be2d8c9ae2e6cb8fd8afb72c54a9af6ddcb2ff1b31a2336cfbe57bfc7889a6b2f0083d5a86e7538ade45c44065fed00fe6fb80231204f24b3b10229168e955383e82bf1fc06d1d6dc10864f94de5d83cf7c553c68a8b37fb2c4ae616906770c120f059cc0ed91326ad9c80eb66d63904d81b329d30f6c288ad9e452933d836f5c1299170a64b5813478935bdaafc51ca0ba5d9fe99265fc8733fdf4c41d03472b73ab7af9ccbda6d8a6929d0c3c337a6d09d480e2dfd95f69fc6b628197210e8cd637e3639c1aeb9f3c6d5bc7658c512d16354654f0533548f73b34ccaa95bc55b1996e5b58568083e46a6fc3aa2dbdf7fcac4a747729526180b68ef5e34037dced0f7e542d97dfbbaeebfa2a69dd02fc271f7d25da3fdbeaee3d2f94eedaf204b39743eb28f96bb148acd7425e84b32878f6b338969506808889e6817e1a84461f3f85095d53cd408309561c1571d2fb151d4cf5b437ebcc1f5e305da5a5675e1e5ef25a412fe69c236391af1e231f484b83f930316ccb9cd91262db3935e5e41a8ed95101ab9d4c33c01e01af037a371c7f57954c203e4d73e26b9f0095c03dbd0ffd82b9b5659d4c0c74142909251da1ac6184358c3fe2d8c7eec588b7bfa274a7a407eb0e8151d85c84ef67361c1cf52ecb6297034481265182c9193db9bba001b6ed6b427854875e3703ae27f0c1bbfbb49797cc6557e99c7cef9b1938560c0438746f122616287920e25511ce4a668172f9e998c2b44d4d0ab6f4169a3b51f3e9bd56a839c4f2fb0aa360d093dd028744f48ba3779f56b81f3e66278b9258521fffb06aae837b3e97809ceceec48715e22537fb76ff946e2744808bbcb5d4decb7a616c3575c891247bf89c83338e10120d7e77fea5f3e32a1949895320cc212b68a56919aff81e19c1c83a33559c1cbffaa0265e4f4e5cd7ac96038763620d7b5e6623fd4ed3c37649fd84653c93fa77a53639672a4bae757a8c351b35233e6d4f1568f619abe67e5b29180441569d7bb37413995a352befc272d7922fb60d3830181838bc14822b328f36de74183fea495267c9ac527b235506f652636c35f581553ea40ce986a9b9231687412b8ce6184ecf7b23818afab703649da58249e40f14d538fe22a9156f424543b0719748da108bf030ff26c8b4391d26447771e39d4b0c265b09c57bca6c241e883ea3c7972802cc2f3909337bc1d4c8dbd3056a0fbd16b725eb8f9890218388e3d45203a5ba3d5724b3f7261356eba036cad1fb3a07e9284752cb25899efcb2cb168059c2fdace9a139df9f97db4c80529422261c4d6e66e258a579ec1d69ff9c80af03309551ef1cad04211cef65e2839b8555b8d41cd58b8ddd5d949eab7d67b91c6e9ebbe104d02b0dc1b8900ffd1fcf2fef7c5f1260cc1b532c9fc6ec0eafae0ea285515666ac9f80222cc74f739b8316c2a3feb70516b9c7904c5e2c14f410cdba2a0d95217dd4d84c3170e3b8fbe9cf94d227cf20547f067962ed208092d34dac7b1359565e4fa4722eadfc00e3b12785b31c89e0788f372976db29dfe1402c087a69b16410f886b517e3a47b2b8c761737a94e19f4a859ec898d8f1e2e5c46ff54a880cb0473f5468ca6bbbed9d7be0f5a4ef302491fbe9b87e3e9c8a3be0ec687de7f887e0071098cb12a8e0a1e357f0a2dac2f65dfd15f3b83c910086877485d18c46efb5080e9fa78da1ed47b4c2a659dcac7b8aed17f19b873987194ad93d330d3c2c96eb7f7a61df1cb4a89e5851307d591fdef45ce8af2c4649a3b8f298fa2be61ae29f200c3a24d5071bd2a6c08a84ea53a6f16c91fb02c8c0696fbbbf8dc66e251c52e411c817a6237327d1dd09304aecc635233754a75240e99648309e6c029567f6fc9ec3a804f37a00c7ec5944b166be17bd701658b7119239c71d71be53633f4b28d306d2d8d4b1636ad5eb80ebd4d96a240d82d6be6a7b7738f660725729b7fa311f0ed2a35a07841561429e07eedad886588d1ea6c2f711f9820e53e240170e873d4a50a2e3f14a2ab129405db92437c3c75b0cfb2ccaee5cda80df9db696f134c210f4ca5e40dd2860574cfea598be9100b7d01bef3267ef2e4a3f4ef7bafd4e4d60459aa62438fe89bbc591b1594944195a3cfbde1cae2a783bff177cadc8eddaad67317f8bc62ab77fe09a0ba54a3df1d2ca2ead121c05a015a986a523e9132b98493b0278cebb48f15b1f16f2f22c3e0c8ffe21b54a01bd9b197d4dad9250ac4844794f33e88e1e21b468d45aaac0e8fd94930fe454291d01cfbf8b5eb03a79f51d827f42fe53f6f8f21fceffa84feeb5d81229d19d161baf3d98b9125e3d4b0bbe667cf774b46b636277af1a2f906ff106dbd08ee25bd696d803fce9220b71285d2cd1e57f7d3b4aac5b7b339995f4efe84eb6f6b1d1c14c3f815d318f894201a2cfa3f43c51d77f726ee83c35c9cdab12e7b012a0c272f853fd45d4fd176b7c63bdb96b136d940d8a53e0f394a5cc8c0ccfd69710916c61a45d71b869d21f2bf31dadb1749edd42fef57579b3cca6173e77b7f7004c0c43b6c04f13a3e9d57f84a76651d4b25f8cc22501924beaaeb2c1d0444d420bee462d87b602726c9e0d193496b00d9b423ae4294c41fa8b0fd89e8e1d082681884a07df5b637aa6fb1dd29baed29b14b391ec13568cbb52257cbdddfbdf0eade1cd67273c11e3ba18066bfb9541b37a1f4bfa1a6efe459591e26dff50033fa552c76607ef9606be5407f60a55d146dea52b583eb204969221c9ef6ecf1bac8cfef9ae0f8ab65c6cacc7c8bcf02a5187bd5238145ac7659d1c18b00d3b2b3d22c249c69c26d26d54c8904e6cff4438021500f042d82e6b45a48a1336b4cb54a57be7ffca6aef7ac1f01d3ee0c110b1c1caacbf5d71b98c313d2c271fe88c1e5f1facd0b59c66ae85dd9ad18cb8952f70a349326c690db4b491b59b63d9ce40f30c8ecbc9d00ee0994af44d77f47d3bcbb7b3d7eed0ff468bb6db08f75134ea75d7415260d7152fc528770a0e19d322edf178d41374a5917c89b53c8fadbad84b3a5d1891373f9fe6fa7eb7c056ca9a47af4cec7e1a2e4e11c6a7f49db0df43710538c947b8015ee1edd65bbd3338915dd707203a528a56ffbbe89af5eea9fa53e064dad39d723f10973f5c5eb1cd7fa385e1097d0f33064b2284e9e29e9d307d36eafae136b8f4a098da8f2d04afef988624c175a64662cd45cf7c2eebe1900ea8ed14ed2bfa29ec7df1a6f51c24489ff018436afe04856fb1d85be5e782e2731e0a2e1c9f0142ce32dfebcb1424ede5ce820bc8f1d2207c20e08291af696792690746883156151021057344cefd3bd4f086d2acbd64b4ad2547c4140f051ea83d6c1159974ac165a7a9e8a6b8d5d3b7c8c646c7da9ad1c5dc66eeb1f52a2f3f21b8492327188f76fc1e6c92e1827d37c80c722a33832a4e99bc5efc0d98d6789ddcc492809c8aec2eefdc9b5dce6a95abf9621589b28c5eca7c6468b569ba2997ded68badcd31420d9e7449d889bebdf5cc88215058d4649d451d582dc07b5160ed08459ee2ed2e519e707f3452075fb9210559df7c5e868306d9df303445326ffc2ca10bbcf4c6d54bc9c20032b04529f12bd6e1c29c4bb65d607600c8a13789ae27de115a6122278", 0x1000}], 0x5, 0x1, 0x7ff) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='@\x00']) [ 2608.600058][T12473] should_fail+0x3c6/0x510 [ 2608.604280][T12473] should_fail_alloc_page+0x52/0x60 [ 2608.609312][T12473] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2608.614521][T12473] ? is_bpf_text_address+0x172/0x190 [ 2608.619651][T12473] ? stack_trace_save+0x1c0/0x1c0 [ 2608.624499][T12473] ? __kernel_text_address+0x9b/0x110 [ 2608.629707][T12473] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2608.635112][T12473] ? arch_stack_walk+0xf3/0x140 [ 2608.639866][T12473] get_zeroed_page+0x19/0x40 [ 2608.644294][T12473] __pud_alloc+0x8b/0x260 [ 2608.648454][T12473] ? handle_mm_fault+0x1a10/0x1a10 [ 2608.653398][T12473] ? slab_post_alloc_hook+0x61/0x2f0 [ 2608.658534][T12473] copy_page_range+0x2cd6/0x3020 [ 2608.663296][T12473] ? kmem_cache_alloc+0x168/0x2e0 [ 2608.668148][T12473] ? anon_vma_fork+0x1df/0x4e0 [ 2608.672747][T12473] ? copy_process+0x1175/0x3340 [ 2608.677432][T12473] ? kernel_clone+0x21e/0x9e0 [ 2608.681964][T12473] ? do_syscall_64+0x34/0x70 [ 2608.686375][T12473] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2608.692323][T12473] ? pfn_valid+0x1c0/0x1c0 17:31:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000340)={[{@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=fd,'}}, {@euid_gt={'euid>', 0xee00}}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000340)={[{@metacopy_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=fd,'}}, {@euid_gt={'euid>', 0xee00}}]}) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) (async) [ 2608.696529][T12473] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2608.702086][T12473] ? __rb_insert_augmented+0x5de/0x610 [ 2608.708163][T12473] ? _raw_write_unlock+0x2e/0x60 [ 2608.712943][T12473] copy_mm+0xc4a/0x13a0 [ 2608.716940][T12473] ? copy_signal+0x610/0x610 [ 2608.721368][T12473] ? __init_rwsem+0xd6/0x1c0 [ 2608.725870][T12473] ? copy_signal+0x4e3/0x610 [ 2608.730293][T12473] copy_process+0x1175/0x3340 [ 2608.734812][T12473] ? memset+0x35/0x40 [ 2608.738632][T12473] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2608.743583][T12473] ? copy_clone_args_from_user+0x744/0x830 [ 2608.749222][T12473] kernel_clone+0x21e/0x9e0 [ 2608.753558][T12473] ? __delayed_free_task+0x20/0x20 [ 2608.758498][T12473] ? create_io_thread+0x1e0/0x1e0 [ 2608.763359][T12473] ? kernel_write+0x3d0/0x3d0 [ 2608.767878][T12473] __x64_sys_clone3+0x376/0x3a0 [ 2608.772554][T12473] ? __ia32_sys_clone+0x290/0x290 [ 2608.777415][T12473] ? ksys_write+0x260/0x2c0 [ 2608.781759][T12473] ? debug_smp_processor_id+0x17/0x20 [ 2608.786964][T12473] do_syscall_64+0x34/0x70 [ 2608.791217][T12473] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2608.796943][T12473] RIP: 0033:0x7fe73cec4ba9 [ 2608.801197][T12473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2608.820640][T12473] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2608.828880][T12473] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2608.836708][T12473] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2608.844504][T12473] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2608.852318][T12473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2608.860131][T12473] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:10 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x70, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66ed", 0x69}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2609.067363][T12485] 9pnet: Insufficient options for proto=fd [ 2609.099230][T12480] overlayfs: unrecognized mount option "smackfstransmute=trans=fd" or missing value 17:31:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000003", @ANYRES32=r5, @ANYBLOB="800800000a000200aa"], 0x28}}, 0x0) r7 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe188, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x5, 0x8, 0x0, 0xffffffffffffffc0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2b0360c4, 0x6e, &(0x7f00000004c0)=""/110, 0x41100, 0x15c2b64936bea0cc, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r0], &(0x7f0000000600)=[{0x1, 0x5, 0x2, 0x4}, {0x5, 0x1, 0x8, 0x7}], 0x10, 0xfffffffa}, 0x90) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r12 = dup(r11) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r12, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) 17:31:10 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x82004, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e7368bfe9c02d5cdfe80719", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,fscache,afid=0x0000040000000000,mask=MAY_WRITE,obj_type=[%\\*),,obj_role=%/,\x00']) r5 = fsmount(0xffffffffffffffff, 0x0, 0xe0) r6 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r6, 0x80041285, &(0x7f0000000000)) r7 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r7, 0x80041285, &(0x7f0000000000)) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) write$P9_RVERSION(r5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r9, @ANYRES64=r0], 0x15) r10 = dup(r2) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000400)={0xa0}, 0xa0) write$P9_RREADDIR(r5, &(0x7f00000004c0)={0x49, 0x29, 0x1, {0x3, [{{0x1, 0x1, 0x5}, 0x0, 0x1, 0x7, './file0'}, {{0x10, 0x1, 0x1}, 0x8, 0x3f, 0x7, './file0'}]}}, 0x49) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000003", @ANYRES32=r5, @ANYBLOB="800800000a000200aa"], 0x28}}, 0x0) (async) r7 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe188, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x5, 0x8, 0x0, 0xffffffffffffffc0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2b0360c4, 0x6e, &(0x7f00000004c0)=""/110, 0x41100, 0x15c2b64936bea0cc, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r0], &(0x7f0000000600)=[{0x1, 0x5, 0x2, 0x4}, {0x5, 0x1, 0x8, 0x7}], 0x10, 0xfffffffa}, 0x90) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r12 = dup(r11) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r12, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) 17:31:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) 17:31:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x82004, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e7368bfe9c02d5cdfe80719", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,fscache,afid=0x0000040000000000,mask=MAY_WRITE,obj_type=[%\\*),,obj_role=%/,\x00']) r5 = fsmount(0xffffffffffffffff, 0x0, 0xe0) (async) r6 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r6, 0x80041285, &(0x7f0000000000)) (async) r7 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r7, 0x80041285, &(0x7f0000000000)) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) (async) write$P9_RVERSION(r5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r9, @ANYRES64=r0], 0x15) r10 = dup(r2) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000400)={0xa0}, 0xa0) write$P9_RREADDIR(r5, &(0x7f00000004c0)={0x49, 0x29, 0x1, {0x3, [{{0x1, 0x1, 0x5}, 0x0, 0x1, 0x7, './file0'}, {{0x10, 0x1, 0x1}, 0x8, 0x3f, 0x7, './file0'}]}}, 0x49) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:10 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x70, 0xb3052f7df3c53cac}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201006) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x82004, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e7368bfe9c02d5cdfe80719", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,fscache,afid=0x0000040000000000,mask=MAY_WRITE,obj_type=[%\\*),,obj_role=%/,\x00']) r5 = fsmount(0xffffffffffffffff, 0x0, 0xe0) (async) r6 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r6, 0x80041285, &(0x7f0000000000)) r7 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r7, 0x80041285, &(0x7f0000000000)) (async) r8 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r8, 0x80041285, &(0x7f0000000000)) (async) r9 = syz_open_dev$loop(&(0x7f0000002e80), 0x0, 0x0) ioctl$BLKSECTGET(r9, 0x80041285, &(0x7f0000000000)) write$P9_RVERSION(r5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r9, @ANYRES64=r0], 0x15) (async) r10 = dup(r2) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000400)={0xa0}, 0xa0) write$P9_RREADDIR(r5, &(0x7f00000004c0)={0x49, 0x29, 0x1, {0x3, [{{0x1, 0x1, 0x5}, 0x0, 0x1, 0x7, './file0'}, {{0x10, 0x1, 0x1}, 0x8, 0x3f, 0x7, './file0'}]}}, 0x49) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r1 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000003", @ANYRES32=r5, @ANYBLOB="800800000a000200aa"], 0x28}}, 0x0) open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r7 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe188, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x5, 0x8, 0x0, 0xffffffffffffffc0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2b0360c4, 0x6e, &(0x7f00000004c0)=""/110, 0x41100, 0x15c2b64936bea0cc, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r0], &(0x7f0000000600)=[{0x1, 0x5, 0x2, 0x4}, {0x5, 0x1, 0x8, 0x7}], 0x10, 0xfffffffa}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe188, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x5, 0x8, 0x0, 0xffffffffffffffc0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2b0360c4, 0x6e, &(0x7f00000004c0)=""/110, 0x41100, 0x15c2b64936bea0cc, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r0], &(0x7f0000000600)=[{0x1, 0x5, 0x2, 0x4}, {0x5, 0x1, 0x8, 0x7}], 0x10, 0xfffffffa}, 0x90) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r12 = dup(r11) write$FUSE_DIRENTPLUS(r12, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r12, &(0x7f0000000400)={0xa0}, 0xa0) (async) write$FUSE_CREATE_OPEN(r12, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) 17:31:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lseek(r0, 0x54, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) [ 2609.404702][T12536] FAULT_INJECTION: forcing a failure. [ 2609.404702][T12536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2609.417756][T12536] CPU: 1 PID: 12536 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2609.427866][T12536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2609.437753][T12536] Call Trace: [ 2609.440892][T12536] dump_stack_lvl+0x1e2/0x24b [ 2609.445396][T12536] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2609.450692][T12536] dump_stack+0x15/0x17 [ 2609.454684][T12536] should_fail+0x3c6/0x510 [ 2609.458939][T12536] should_fail_alloc_page+0x52/0x60 [ 2609.463970][T12536] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2609.469180][T12536] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2609.474558][T12536] ? _raw_spin_trylock_bh+0x190/0x190 [ 2609.479767][T12536] ? _raw_spin_lock+0xa4/0x1b0 [ 2609.484367][T12536] ? _raw_spin_trylock_bh+0x190/0x190 [ 2609.489577][T12536] pte_alloc_one+0x1f/0xc0 [ 2609.493826][T12536] __pte_alloc+0x75/0x2c0 [ 2609.497991][T12536] ? free_pgtables+0x3c0/0x3c0 [ 2609.502594][T12536] ? slab_post_alloc_hook+0x61/0x2f0 [ 2609.507800][T12536] copy_page_range+0x29d8/0x3020 [ 2609.512571][T12536] ? kmem_cache_alloc+0x168/0x2e0 [ 2609.517431][T12536] ? kernel_clone+0x21e/0x9e0 [ 2609.521950][T12536] ? do_syscall_64+0x34/0x70 [ 2609.526379][T12536] ? pfn_valid+0x1c0/0x1c0 [ 2609.530626][T12536] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2609.536183][T12536] ? _raw_write_unlock+0x2e/0x60 [ 2609.540955][T12536] copy_mm+0xc4a/0x13a0 [ 2609.544958][T12536] ? copy_signal+0x610/0x610 [ 2609.549373][T12536] ? __init_rwsem+0xd6/0x1c0 [ 2609.553905][T12536] ? copy_signal+0x4e3/0x610 [ 2609.558311][T12536] copy_process+0x1175/0x3340 [ 2609.562831][T12536] ? compat_start_thread+0x80/0x80 [ 2609.567782][T12536] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2609.572719][T12536] ? copy_clone_args_from_user+0x744/0x830 [ 2609.578361][T12536] kernel_clone+0x21e/0x9e0 [ 2609.582703][T12536] ? __delayed_free_task+0x20/0x20 [ 2609.587648][T12536] ? create_io_thread+0x1e0/0x1e0 [ 2609.592508][T12536] ? __this_cpu_preempt_check+0x13/0x20 [ 2609.597891][T12536] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 2609.604399][T12536] __x64_sys_clone3+0x376/0x3a0 [ 2609.609088][T12536] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 2609.614128][T12536] ? __ia32_sys_clone+0x290/0x290 [ 2609.618999][T12536] ? __kasan_check_read+0x11/0x20 [ 2609.623844][T12536] do_syscall_64+0x34/0x70 [ 2609.628103][T12536] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2609.633821][T12536] RIP: 0033:0x7fe73cec4ba9 [ 2609.638076][T12536] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2609.657512][T12536] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2609.665757][T12536] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2609.673571][T12536] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2609.681379][T12536] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2609.689192][T12536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2609.697002][T12536] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lseek(r0, 0x54, 0x2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) lseek(r0, 0x54, 0x2) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r2) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) (async) 17:31:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e09938", 0x9e}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:11 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x3, 0xfffffffd, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff000, 0x400, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:11 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) lseek(r0, 0x54, 0x2) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) 17:31:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) 17:31:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x1, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, {0x0, 0x20000000, 0x20, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6000, 0x7}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000002140)="3971b0111920c2caea5c9d945c911d942057522b2775b48dd19c7e86cd727d9998a684c11fc93ddcd16afe685d84465ca77ebd4d84f1be88c044409bb411ae592ff1acfb0fbc9785671856ef28f8a23c4386e318f79b369d6512e42179a534dbfe4cedf4f407aa1b0a0259420f3b5329b54d478201fa4a81a27cf6747018ffb5a7587ac88c92599a289f49f69b650b477d288a42ec8b3ce848cabe6aa28f6907a237fe8851244ae5552670d4e8f43c2236c54cd56038a19bb4f12037343a29ffa00b956bf8d74196ebce238be4ab98879ee3e0db367159c046c5d9f58f141d245947c129610c79e26821b4cfcb11baef8aee9d797c356f0062bde33b9de24c918ac891958338cb16cc067cb290874d6803a5047c49f6095001703dccefc86119185ea5806cec34c131fa3201d259455fa548a843f10c8c711c06682846c5a57d44a6dcc04f47d18ca8e5f4076d39f3d8335b6befb5a4a2a20007dc884e8db1b9157175f4106be843742329c14f0e6aceffa4a987fb7f0de548867b831384f4f5430edead23c3c907e6ea10e71810e2568fc496bd0190e5375e1694bdf7ed08b271155223318b0f8b8c0c32a1a7947fe97a746418abb8c9f42bcead3bf243553b72004d214d27ae9b2dca3641a6c5095077181cd93d2cc0761bf20b0545c9e9628901ada4774532ce1eba9da396806762e6218239177d10c98994beca8b33b2915f0be78b772761c4d6b37aa98957947086e7f7450bf7f66ed0ef87335105edec22dc95a268db00992926c487b3b87408bb1fc0a585602f3b336493fe5bd827d2306dc4603982c596e4f15302cbcfd0dc09baa22cda668df274b190d2c93ce12c49e36c840f786e8dff9d9c391a6c22d110689c9d69c4f8bae0f3a9f633cda803758366c950395cdf5047eed80859e09c74005c639ee14c894c2786c4f9c66a11483cbfa67a98154d4fb405bcb59a2a4c39542e49be6728749e712dab47db707e366869592055d4d3f68410bd76456d0a89b9834f1b98a95018243ea75aa67ab0a8f1e1a96b97c6e91664e8a66a5110678a1343992fb32e7b99dd253f320088099ae4aad45e626365effa69a6bec755e857abe147c319c216b5f7ebafe3b257357c1b53ef1d4c8ee13cf47b6cdfea8d8bcf03b8cc14c19c475e021c539bd0ddce507c4821b2fe43975de8345e0f16c7b2c1cde64095a8832853c82cf1e517615aa59b502665a67c59f9f064205917a5e4d24d60b67a19c870fe3c6a8c027b853b2fb6e9098a9d8629b413f57b50792c4e4b1dc758d5ddab78e6b86f359daed7244351c1acaa706ef56f402ef4fdec9f9d6cb32c754a1c3b15542b3d544a675340beae493eb4a7ab9d98c7327dbab2aa6f22dff065d82e3b1c59710823416b3bb0196767a712e59f903b280b57b83cfc0a753fafe23951ce25ffaa22e0947303817cdd3674243e3fbb87cb7fccd4b2e9037efffd568c27568e339d355cea1302c8e9a4cd2f6f71b5efe1ec399174ed02ce4d99f5901bdec2a9d347f9c035c84c168c7da72f114790bb01fba6b2d40333c3f0d3b6609fc2c7cc2c1bb2bf92c2a727bda8585e68f76d5adcce72b5487988e7429ce15c1d5b144d498024b6264704c7c167f0c8927bb2f196c3c41d447684415aef5b6e6ab9d9b98e48115153784b5cbb0f7e00da9b738f6a39ba3a056e8be0dfe67d9b123863e2a7ff13f831df19e981d9373ceeb9aa3bb2f16457c16d3864a85b4bb203ad618c9041be664a62b51ff388a8409f350d8c64484a117d2108afb176ca06895f6fecb7c1ed041e224e444734e5297a4e9e1ed90567d77abec03cd6aa26f5dc4cb3dd2cb476c6a845301f6ce7581dac61fb4d13445aaba1571e8c816df3e8c718c2cd1320939337ef9daac02e426028e2c8d80ebcee6411452fd72acf16d7e340c22999263bd8b25d0ccda89aa715c20228b6c696c27086e8aafed39ef01c772a0d2351c77d55689faf0403958bffa8ac3d5041c4ed03a0b4d2d4ca7934058a2ec211f4b21760ee2245d5bda3110e6dad5136a1c2a720671b2a0d2aa25013a95dc4c758962ba05166c9307b300ce2418e925cd30b206d10d6c3eb36e190b155b62aa8781d7d66d347a9681a9264d55089d7169f86bd0fe077b1013dbae17e1e4aaef345d37ee8bf54464b0172227577f754de2ce5b6eaf0bdc0bbf773aa3045b664f349165ab23ecdfe7feb1fe9da9c88ea4ba55f32307852b553ff5c4c314ce87e55bf1c679b16dd0837f3e91406cd67a8fdf51f774cd034fa12e96f117bb2f707c883309c82d814c7abb461443b1523fb4af418f2108b9c608bcda5f1343c19915c54fbf2ac8489b094a3a0cd5f8d2d19ee108b59f2436a6efd9df826a7dd6b5610983b8423ccedca5e5172a9464d1aeac30c9a65eb6322e635a97404b1d1347a7e51538239e20f42e7b58301b80b17b7a096ca4c7319da4e0ccc5c8c2a3e56dcdbddf7c246b4149e855227aa222d08a8c06b3c3ac2dd588803587501cf8f2943655eb0d710872bd46d10bcbbbb1a92d9182d000d83574b3525317e0e35addad9fbdd40dde7ca09a641942faf98e9f0f117e5ae6e1b1f7731a7da37d2ec88fd147a8d64c57d932e72a9dca89ceb665974e29d092de4bd1e8db9aebeef9d663c5360bee323956e1e794147cf988bca5115e1cdeb08164199519d56da562188c90128ff6bdf9a56bcbccc7225c39d953866a4a0aea79404a2153201978995784ffa2d0fa41e90e1e0152e2cdf594e89a54464cd879f9668fbc4f52e68498c860f4483ea4872174870f08ed05089c7b4f9eb411513c408228d0d1686a69f78e2183a09671420b413c8de51a1575b35d67ba61da0cbfb62fa86e869ff862d3451ef199c73829d29e5232d46a76a846e7de15fe42805d13f2cb239fe0f61cf6419de5a32ae58a05fea217bb0553e6150c34037ad07fdadedbe8df4dd2325e1054f1399693462154163c8e04b393f0d22765f13b4014a74a6f4442fb063bd26bb35144dbab51bf2ed3903698e2bd0336694ba1b804574ce14532fd971b5f2ffde422f455ff8289d47e43f183dbd3fb5f2a97215a687319c58ed0b0fbb28bf560f86138d25c0084abd720cda091b159e56fc214cf04c86f0eec5dcf3ff9d3d5b0c46916dc8956a0978aa30a7795673a35fb0815a399cdc59feb4a9fbbd34c184c6e045563f3d08c04992d322b1b653052da6fc074a94c006631e81c57c4ac7fe39a12c8c3f5825eec750c5e539dba8cd7a4e3cb32636d96e004bcb58d6baab1b55a3f75fb138aa3fb44e6f99ee81101adb7bd17ff0fcfaccb939382d470de2689fa69f1b15a4c94462025c124705cd480e0ef8d405a66f25f39aeccc39c13a0e9c4cb9c57165d95bfbd2c8b1406c1f79414d0f2c7bbac29f49386e299b0c3a05e1416eb6f8c0235c981ef9716ea0648be8ce33462a0d6644bcbf15e6f274902c3df0beeda20b4dae2f8660b4eb63c5abbc69faf52b2fedec07dcffc588c80bb3049350810bd3701c5f0d3f1d3bce35c9265d5b723bb39e814b11fccefe53ad942c28b1a959a47c77afba70766ee2f85f1afe47e9f6eee49dc4eca80624483fe87e7da02a16efb351e84434aff25ca31688dee59159c6f8bb57c314bb14a22535538a92bf9d6fa9f0b7703b5929274473cf4f8f3875c4fdb361425c851f942189fdf3b6dbe7051caee082188ace9f68173e1a4dbdbce09f2c3fe9eac612ce330199fd2794478843980a16c73273a345a98b7dab9eee77361887ad0bc6c1a13c839220a841dad35a22896ab31f7ed96d8ac921781bbdf66e111a2513d79493816adbfc679d7b8d23a8a7859f60203181b2a39d0472efed7ff3a374b61018a98a81e1d1b7b5aa4722db260b468df159fb7148bfaed0c780a1846f8ee6b0d22ecd140b55a3ba6b6351e5658a2a398c3e09a03d9e3e57318b40d565baca2b9f2e3808e52d8c6da9fe39a10fd0c7b2213ae696e59fca91769ddfa217c438334d2fb8af5c194cae26c4d07166876a8d11874584e5d5e4cb5c79c8a8a5616cf88eebac0a5314a5cf767d84464634640d3c739a4e30fafb016fa80b7fcd624895d4969da2b86ba68d15e1ce677c05ce24a2ba9bad50d5b04dcb21f644e3d56f9eed1fbe9b4c83dd5cd798b6eb67f647f948d2bc17ff639f983ed5a0145cc297fb2c61420d31693d8dc0873bd01376385adc62db9078d3d06c44eab217429352d9225b401dff5d6276d7c8487bc56b26f67d3722cccff1fd326f6de66b139434e19a2b5fdcb3b676a791ebdc39a269ff545137b9b6e23f9ccec8d2a70ea57b711cad1c6b4790fc8ce1637e3a705cc56fb68f65daf572e022b79d97eb417e0e964f7a2dedeb2a3521d564e7b93eaf56e2730183f8de0db88c8762c5451b83625669e1be1b72ad967f3e70d9f1776315d7dbda874ac6099bfe9cbd5a1a4932ee3a89557c5b19ccd02412f023faf4c301123af177ad26809efc00530e9c252a91c0e2c7c7f0ef38e3954dbc7512aeb51e2f98c632928eeadbbc5321d44c172dc37b678e695cb90bb53f879e5a848097754c669a957880287f26f96d60b37ab9fe3d4a290f64758da06818f48782bd2e0ac6c67c6704cc9baafb50ed0ee0cf28d032e798babbb4ec7733d806ca9070d6c7b3b3bb08b628fe2bd2349efffcf65fb54094e8d3a294b24add175beb7a4f9345dc914e2fcf0ee5956e7bcee272dde512d6885f1ae6bbc72995cdfebf73114cc49b87a9759f35abd805e956066b29cc9507b5a1cf970434b072f7ebb3aaaba6ad9ce2a7eb5f5911ebeeb0c9b1ae57322d417709138f30f39508a89bf6fc2a19f9a05cc33c1240b996619bafd0c511b9fb355f6aa9270a3fcd4c23c5247f02ad951ed2690c4bd5c41daff2c7851eb70f2217be83723ce6a390aa32d0a61a924c92d0b7da29b88cb307b7ae2fa9da51e2e00a20fd383731ebce0c3cda3cc7307f8823df05c5bdb44b3eee3439ebcc66929ea9b4e53b03504f7907d2e9a3f947c670ca7aba54d1bb188c1071aea6deec326ec2e014fd15e7913bb893bbd9d0106d98101cf6c4631b6783b721010e03bde3e51efeec8f4dce6b470b4643175d37480b0954c081e6b6adc55b053be52a86a680a635b2085252ec218096d432400e92ccea58ec5b867a43d07e3bca93c14f2617ca4afe1232ef559dcc512f03220a1ca2e3d0dde3090111164ca53f86377a38af491a89b0283c75da6cc682690e74679b6f37e2628834c2cc54afe80b40026403fe0090857ff86c435b20cbb9fc81cce7fdf245ce384681a12c688cebef4d81871b25333642845dd719a8d2299e9e53f41bfb98aa5eb7cfe8cf604a7761f2c1406aeaa6f5b4f598e18caba94b998185c2366fe678caed2c0ccc29a636bb270a41d859e4160edd705713aecc322676617fd55d758c7e3d66b83526f36f54890faae33a2c5a39f1bbd09baca984cb31c8aaab9a66f05be9796698f95424e786087af3a10e7b36d32de09d61cfcb55014e5a34613d6830507dbf551e96d029a0c3d260d22b8fef38c420e7da2744e2559402a91879cd201885c3199b34a1e0071cf32a43ebc49fd02ba7e44b64b298843ed437f39029e6d3157bc3c2cded92db096e5011067a67bde535c4406292b6e6af01e5a6ebefde90e35bf425d179102fae0d5e0705d4ff2cdb8a49c75f8915094722e4de624677fb1bbf72c978973b579a885485a5c0b49d851c0b9484ca790f87e012d4f7f1cb791348d35330c802a9a39c80bae1235f6d7dd73f9dcfc1c907badbf9b3829da2c2e428064258a68409566ca0d295acbd6a0c72f40f62bb9fd312338ae9ffea0f842faa04d49775eb5dcf715e91d66941ab628039829c4e6cadf6d2f5adf6df364f5f3d524c08aeb8886f113a485f5350c28c365211f766e19639d4ef57968faa57bb7c42e9e82a02c63bb30195a7c69c8c5f900a5cb391d929132547ebc5d17a4c9586ac1f308f393f05e409e9fbe37bd2f5951298f50dfb24a8f4c73d6c8cf4aa8d64708ed323e2ddfd794be4b81edf332db0ac2428f3842dd192de3beb0fd61143282f894e97034eb9903c6e8f8b83edd68785f533860ba2f309bf37e82ef5776adacbf3a0c4cdde1286e0a35a76ea37bd6e689f0d2d49ce90a18ec5891a69e10eaa40cc88bf0e4b8fd6012de9c522ff9afed0d86cf644d8fe7268387cf3648d52dbd23f86c4ad61147d1e30dfb4dfa765bb55ae2031f7702006e0450aa0576eb82fa9e0b9587677eecf2bd9c405bda7a672ec1e7e2f241a07446eafd5de90b67ac15d45804bf0f0411c0e1cb1d08066275728eb6eb35cca70e64d678603b015f3f8895e819a17e1a306c75566fba4a72d33e87ceb8690889a394647522c34f8914bb3a9681eaebff708c6f3cd5cc5b9cb753e97d3b67977e0a692c5b1d93665f7464ce0c609fba020fcd6c9ff8ae001b92774943be71b4222f083cd97755f98689a4a53e2c5621511441bc6b14febdaac2f1a2e8656ab7cdff82ccc933807cd93b29339191d5cf8dcefa8949a8946456b57719f559ec8566d73b5637460c13dbe0dc74870a74ddf6153f70ef93191e9aa5d70570900d4354126511522aa2ef3ef390f857623da9b0da0c1c268690dd446f7cc79a1825f3052e882ae7767c7a2d0adb544c403397b86a717035c93489c296ed1c000201f0223cb060e06c055b0102b2cc06159112b3cce7824d1c8ae12962c7b26adee470eb498b4be359d4b04e57f7ff12aa30e0099d482a69aa2eec02fe35cab0f4ab5e793e7605d8277b381350e5f26c1d67cb42ae13c3a8c4d6596f501a3ff729f320ec668e79b9b7ad776886647a524752620272cda7fb01247542e7b323f60deea0a09d9828753a6fa793e1cbded516934a8f62bdce5ea726c347e3fd6bc2d9d4b2e8aba2b93a4709b8a6e9be0c03759ed82e6aae144eef74e97c54402facf7b4a41e9218ae03ceea8fbc37550101bd6dee6bb22c9ab8c0ce2eb6157d81db2bff16a3c9c654bdcd14a1b7e86c35538b0ceef0653156b73996661a0a086223a09db37edeee093f7c0219a78fbae5884ad82337f42fce5c3e668bb6c65d94cf159c931321c1383c4283666413f0c347e236536dee07278c3f345f277d29dfe204fbd1545078457842b5969818c29ddf7003bf604a203112e03dedad95efacdda1da0ec9a7849c23d3c63588f7f60259a8a81d5148ebe4e973f2205a971e2322bb5fdc05a6d742dabe40bd9a0e2249b5e0e9ee213d0cc4fe3195fc6ef7db391a4cae0144f89f08ebe21d7637bcb209cc6283d6b2a60832b1e847154b2e2301ca7529b0f726a7778b94d90b6321097e4c031915c8504e73c3028c8552adda3d767c653bedfe8ef5ce493da759df591f13a0fb7ce59e531ffd42217b673f02618f400063b62bcb789cc35d7256e68e8f6ca88e93c8be5fdd9c588a9cbf8e953b75859e3c45ad1571f90f1d958f47ceb4f6fcbf4d7d1f4de7cecd1fc7c5e0eb9aeb7de54b81e608ee9df8a95159f2d16620159ca44bd5c0be1ebccc882d8534c29fe17035fc20ab009d283b4ee06051e5b26eb49dcbb139c1a8bec4ef9850aa60e13e199356ec94cf4ece244088429620dd63ab59795dc130fd09aa53bbdfc8d34e513f632c9732e4fc7979a95d54ea47567207e0bf68cc37cdc24b7cd651fcb933cf83704d411fb1ea5f6faf9baf9875492ce73c23c4de9288b01a2bf326450f8c3ab3c9a35078c3be22ba20771e8cbf5409c6f4aeabbcdd9cf50c859b574b2be8e853d42888578d5706fad855153b15d71e183ede54400a6811acc9c6a7063b87214cad25d15c639c76e846d4149fa6f8e37409ee6237de42c72dd3bb0cd999e0f61363173373fbb4e37ed7b032163f15e85ce5b0b33cc028246ec35b6264f516cdd91b8339def02a10c67407e86abd1d7804b83a1bfef73f03b3e2054df5210b5f01d7cf9cf966143c1539038923f253179177716e04110e731d4bbda2228825c934ffa9f1a34973a290326c7e6da8534200afad4cc855c52a57273f4cf1b7f93070d19843f4f00b93f7c474dc645651ebdce4c929260925ec7fba46a9c2cb309908fcd30b07a950c97db42a156ffae07618d4f6b0256705442f2918525796fc021b0bfd3da4a8bfba7b44425d61078e7ccf167a20bb09759e1c35f67817058b00df1f6585dbdbaf311d1ffac025523e903714fd74551f6628fc3af4ae4206235e2f61f87d67f617807e87a3142bfd4adc62f9016a43714dd65ed606c293958f265c13017c3bd9837596c5a9e9f1c19da55191c9d3076b58b4bd7602ad13e042abb44a555f9df7f65c993339c3f2fc2dba9c8ef70d84c8333403eb19ff140f704863235d7a4c9219a7d4773e8f08529dc27d80d56aafb206402acdb7a1410d89c387fcd0485d658e006937879122b426bdce4c92d215adaed08380251f4d55946b7f33d15df874c75a2cf80cecda902edbe2725aa43c04b2fb1d2983f2f8ae5c1fd9456c399511d07efd7c7df299be0903f2da74b965726afb2741964f06a4d711ed1c6799e29558d54db7e59efd5022723cf2e43428548bc96d00363fcfb19ce259ea657638034210497359716da61fea52ce0db54af4eb241619defe3014d5aeb08b8158f7aa7838bea3fb41d87ab397553a77517693eb304f6d7ca01578f2ea4287732636a3d230fb818a92440cc3b6a592bc8d2dd0cf24204440136de3e2412da3b26af939aba20bc42d203e39f7dd2e13e69a3a74b6887b2fd993842f1076ddf0baa46ad9d2ccc432b6225e6e858e7bb208df4f9c6931e27e758cb23e0338859de99c3829d9b40987194911906d35e2e091d57ef6f7e495ea9a2f64f06963db9c63fdedbfa7433d89a7f19b4bf06ccf7682348f6a4c37962cc96fba92ee89e59b1e79a9710652cf9c2e0aa55880a406b6359d931881d88f9461a85a2df92b6f1ffdfbed792e097d9725a63ab037a5c750aa8aed4d57613951c5a11869b82ae64ffbb25e0aaf566868674005ce81a4c53abc3c526d48947ea52c0247637b82b6bab0432d25d508503a3d9202440939ff3ffbd845acccde7bf03fdca8676ae328ae10148345613dabd3686c00b8c0554a2f1e05ec371ffa881286b0c5bd5053e02f801273cdea5d5e1519cb6521c47208a7d3b20fc38e8042c6dfca02910a39d8c10196c735e902752c427888dff8afb77c9b6e547b5dddaf23863d4881d8d059406aee7798aecc5bc479a27202c2d6e4a10703bfe40fd210f52ae90f251f78599fceefaa0d6aa56f2dbdfc23e140bcd6786d2417485189d2e4bb6b5039c3ffe7d8043e025a62aec08c813c4888f9db9db9b439f090744b23018a1e4496d000fb338a3faccdbc44edb7546f5f217daaf56b096134b8f5d6a80eb76de4dce07eb12cc49ed1bb32864c6434196279e5b8859aeed8a7b8ef3218967a0d439f36632454b633eb87cd0651c5719d82b841cdb126535b196e7977578ac19870d65770d0cb8805a0547fce9e73646f3b7954a58e678106a66f0e39bacac52f44580c06f98bce1a55d1f48a11dd6923d6d657bfdc955e3f77866a1956b53fa06c6b21165379e79497f01d6991cc53b467405ef6e43feaa5532e1119fc3567fdc19279a0d7af4561ed92b0d404c717894784a38b3a626f0e7c134f5d23e4aa702a3719c64ab014a55df10c6b10ec3ddcfbcd7fa6e089bd7324fa4ef8996abbf63cb1ecd57801b7a1f997e3b1d4cb03256a34f39f877d6819a9e8f55261a7270f024dbb534613d4a2e23b0bc572d6195cc66580f724f6ba67b75383c22aae0c9e375b9544c88386dc51d5b26cc93e3ca4bd7b450db3ceef937132f9066827768a073ae3381dace8a155c8c4d1efbedac767028b2cbb8cf7da62e8e8fe63ba85bbd2a70c0b503ebaae2c8b676e73e85cc7734d91fb46f56413c722b0707a41ba019b41c9706deca9d184e8c415ecbf2130592cc06b45618fc3cbb7eaa58c288d1971b7944f2664425e734d8b6f3f0600dd1f96048248bb5145256c1303aae4912a2a51be8c5c4c0936446515b479666d235012d6c142d62e6910abdebb8ea719765ed49dc8f74b78251bd3b69acd031d2df8ff88d1767f057795f969f4a6ffb4024a79ad4d3f566d1227049e54702f934ae042fa81dba347fbfb33c4deba3e3169969a6568cf3924ccc21a02445ebbea55173137330e8cbd777cd610d56e535c814b8d8c30314e0e8c513d77d6bdcc96d5bb74e5e893171e1d6a5baf7ce0972cbfa457713c49702bd985a57f3552a7d3f825b85f81964f1752570bbd8ff4ede5a066b9a0b65ffd394fab84390235ebef3cc9ed1f7aa6b137c34ffe501ba0be579216b0ad9126cd6720284b768928e097b892c66d12a6a77af8bd71873639f42545352bad0e1e16c5b72729f634e1040877f072119b11ba7b70ccae7e7c79b906c99e71292a4b2a6ab6693e057077d25b80b6bdcb81f8d1f0db532cedb2d03500deb072906070bbd0f30a46dd7ebbce88fb86fe04d7bfae54e9256651b2492aafbd720a193541e05895ecf79ee5cae80b3d37064145f28cbc59b701129bbf1aa227070406bf34c62eb71f5087e5907178b6b63f2d13bda957a875469fe97dd4db991366d82bfc77c9f05866212242f9e3e325254ea63303e7d32d1967a9e36f460b43cb0d28151d2b7938097886ce3192a32babb764754f90ba72948a9129bc75e677ad152d278f629d9c14d04fca7b85cea491dd592e2ea7da190149ea43ae9c6a6f9ec1bd515145977424dffb2e96cba892c716f403722a8cd9e79a60769b15a3b9c9f27f77cb8c005980c46b3baaf96ff65edc7e9bcafe366e43e381a904fbdd385b0cf1f64b206428de9c1cb8e1022074c504e91bd201065f2d5a78534cf8a35d457a5113b8d4994e4b2acb18b65dffc048db5c1b60597941cba32d8cd46e6a01d4cf38916aa1c83d7dabefaecc38ab169fd57d2e4a3db4a079453ee55473b320637c5c6a1abb7ead03ab1019011fbbdc1df8a3df4463b5241d44db5074637a8d8a9e1def67d0a9fd3f5dc655cdc45d4c8b0e0ba4d284984f48eee6da1ab2de20b7dbe8a283dbe1e7fa6b385db082216b5d85b844359ccce93b81b0d6f73b2a1625de26d959f83d7f9846ac921796c222cf20580c78b3aca331a4d4e914372252437d76f13cb1d61102e9d05c65d7df80d9349930bf9edbfeb9ac6529834d0010a3f0034c02fb1681e4dd0c7230bd8e93956da3996143ede5a014c610ee26474c11c312ffe189383055523b7c6bb4f9257ee09c0b9f39a147ccc7a4842f7fec60f97316867626b2a7474c2affe8652517cd56c80a823604e52b207c24afaaf91db6f056390f3d480b7df8010d6e400aa1354b3bfacef3e0d4feb5f44ab8ce91c5e5434a9427da40bcc2f30fc36ba19a80cec0809a9bc187bb1fdb1cd107e4db51433a32d1d38993e8d73e8f5852d1790d4ddb9981fa2c413887e3e90d3949a598338982200e25e5331a5dc4aacaea504f54cc113ac13d2546e7422a1bd822ea9d2fe7357527e1ebb61bc863168bb762de09a7f2b681e7346a9ba4138cc24c5f7ca5f65c18a34d2ae0df097", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x3, 0xfffffffd, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff000, 0x400, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:11 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2610.275185][T12582] FAULT_INJECTION: forcing a failure. [ 2610.275185][T12582] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2610.288267][T12582] CPU: 1 PID: 12582 Comm: syz-executor.2 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2610.298385][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2610.308345][T12582] Call Trace: [ 2610.311481][T12582] dump_stack_lvl+0x1e2/0x24b [ 2610.315997][T12582] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2610.321289][T12582] dump_stack+0x15/0x17 [ 2610.325277][T12582] should_fail+0x3c6/0x510 [ 2610.329534][T12582] should_fail_alloc_page+0x52/0x60 [ 2610.334564][T12582] __alloc_pages_nodemask+0x1b3/0xaf0 [ 2610.339773][T12582] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 2610.345156][T12582] ? _raw_spin_trylock_bh+0x190/0x190 [ 2610.350364][T12582] ? _raw_spin_lock+0xa4/0x1b0 [ 2610.354964][T12582] ? _raw_spin_trylock_bh+0x190/0x190 [ 2610.360167][T12582] pte_alloc_one+0x1f/0xc0 [ 2610.364423][T12582] __pte_alloc+0x75/0x2c0 [ 2610.368589][T12582] ? free_pgtables+0x3c0/0x3c0 [ 2610.373187][T12582] ? slab_post_alloc_hook+0x61/0x2f0 [ 2610.378311][T12582] copy_page_range+0x29d8/0x3020 [ 2610.383085][T12582] ? kmem_cache_alloc+0x168/0x2e0 [ 2610.387939][T12582] ? kernel_clone+0x21e/0x9e0 [ 2610.392456][T12582] ? do_syscall_64+0x34/0x70 [ 2610.396886][T12582] ? pfn_valid+0x1c0/0x1c0 [ 2610.401134][T12582] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2610.406691][T12582] ? _raw_write_unlock+0x2e/0x60 [ 2610.411460][T12582] copy_mm+0xc4a/0x13a0 [ 2610.415449][T12582] ? irqentry_exit+0x4f/0x60 [ 2610.419881][T12582] ? copy_signal+0x610/0x610 [ 2610.424306][T12582] ? __init_rwsem+0xd6/0x1c0 [ 2610.428730][T12582] ? copy_signal+0x4e3/0x610 [ 2610.433157][T12582] copy_process+0x1175/0x3340 [ 2610.437672][T12582] ? __switch_to+0x5f6/0x1240 [ 2610.442186][T12582] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2610.447132][T12582] ? copy_clone_args_from_user+0x744/0x830 [ 2610.452775][T12582] kernel_clone+0x21e/0x9e0 [ 2610.457115][T12582] ? __delayed_free_task+0x20/0x20 [ 2610.462063][T12582] ? create_io_thread+0x1e0/0x1e0 [ 2610.466919][T12582] __x64_sys_clone3+0x376/0x3a0 17:31:11 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 64) r2 = dup(r1) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f000000e300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x1, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, {0x0, 0x20000000, 0x20, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6000, 0x7}}}, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) [ 2610.471606][T12582] ? __ia32_sys_clone+0x290/0x290 [ 2610.476481][T12582] do_syscall_64+0x34/0x70 [ 2610.480721][T12582] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2610.486446][T12582] RIP: 0033:0x7fe73cec4ba9 [ 2610.490700][T12582] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2610.510145][T12582] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2610.518392][T12582] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2610.526198][T12582] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2610.534007][T12582] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2610.541818][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2610.549632][T12582] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 17:31:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x3, 0xfffffffd, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff000, 0x400, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}}}}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17:31:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 17:31:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="d60e135a2c19c17ca2b688e9623b35680ad966de46d2294fcc0ca523aab8e691e8fbc0be0af8fa6d2ab686d17c4fe318138c93ea4aa8199297f10ae26c4cb480107f3ed51a347d41b28a0371fe1e6572a201fdbc9432a389c33a6a3aad192717e7e6eacb8faef8d0ed6116ae49fa88dee903a0f389dae1b4fa3d3a39fafcee5739f2131a736bc093fc90be1263070bc73a48fdbb8d74786d0e0e44e598b78356b1a7dc812ca06585277386ac7d949f84b6d91caea81456ee2798250f934873e2bdd45d083383be3de031fb9fb7279ece5366a2cbd873c3cd8a9fecf401f8b8a0332d9ea02efb178648ca52c3b3b127dd7e0014faf1070332ca6866", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e09938", 0x9e}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:11 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 17:31:12 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) 17:31:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x4800) (async) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) dup(r3) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) [ 2610.888484][T12598] 9pnet: Insufficient options for proto=fd [ 2610.904728][T12599] 9pnet: Insufficient options for proto=fd 17:31:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) 17:31:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r2 = dup(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f000000e300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004280)="0f0394830321f18a5043be6095a94523f8298d814106f6cbe36d9d3b57cc13ad4bad8e7176e2393a39d122e15c6b1f1a68da5e60852e8edc6ce090960c72781f5b5155c68b3e993fb45cf264e52d59b685e47c832f804e745ecd041cd73c1d6cd8c431ba116c953a48cd1da1624269aaf8c4ce32fc0f685398d77267a8d93e8e9e10b8b60e7d76621e8654f35529bddd30b70c98084e0031cde3dbef9119c90e7d4fad751af6cb7a4ed8ee83a0612b164b7333e164058b80c0a39117871892f893bbf69160bb525255b077dd2553f7c077197830fc5af83ac00f6b1be8bea7b0e202bf575d61c84c44505dadd88ff21b47d10133b195f88ee8513d577f6825079505a771bea627cba8260ff779d2f801cf0d444862b2c53e13f50843fee5879c96f38db0887c5fd870ea7234fae28549a32a9a16503dbd0dd204d0550294592d923f0d2843feea45ef34e27ef019e1abc03d19eec094f8a11beb4c20c37c79ae709a2146fa9c69dd99666be97059f023dd96e460dc7649199dd572b168793572391c17efaaaa65916ba510f5596f9294e0ab2ece366a602c630e4908ef63113255ac5cf3ab1a18ea0a25ea9b902c18878b87f7f36f30d422a722bf9653d97b3140c1cce2c6d8aaf5372bcf9ab909ef47b275922cd8d294eedf35a49953e1c9e3ee92be2ea074448a216d860787b01cfd3f2352e2968b93ff0240753e51e690ef2f7e3719d388f737c001aa1e700f687bb7388d452a526cb4fa60ec7909e03dc21450c3355f8835103bc08b84049dbf55db91c128f2ab8f88649026e6a66b5428899ae53b097b3c240949334ff6ba2f9652bfce7652a660bed7bc76675489f4f0ae55c01c0fb11e49e5d94ce2ca089f72d8fe1b624df1674d4b36a2c3b683063cd06c075a4316b083ebbfb7ce1d88949e4c987d9d1d3887d272fc3b1c68d18fede53572ba0cd0a9148955722e3548199617d2308c73fa8f77b70f41c2d8ae98f14bbd410860046a1cefc4c322d8bd8373f60ef3c9f22e2b42cda9937774f7978d586b2ca0aa4e35b3753329fac210bff99bfb2ac77da1a6116efc5d182151bf994dec986dd86205e2d8f0c416a07cfcdc6362609c1e5f09b8db521931360207fb37adcaee007ca4c165713e12cd00a1b5dc8c81bf9058c2f520a6db7442ab4ea1579ae81e89baf8d4d9c13eff7698869cfa8acd97d00209247546a0b3b71cc2c49cfa308c1d797209e5e6b4f03a4d8ac4fef29d22cfd5f0313eee1c4ac751a5366565aea4deadcad837be6a9da53bcdaa666b82579800238387bc15b96277b527dd5ac0c09c077e7607547b2b364a7d4f2bff23324e0572c400d57635abaff78a3038182a28ddd828dd23f9b21bc8d17687301e1d7eaa1e07f261762c9b0e2fbd900dfe9e7457c096e8dd9fece7068c77398639630b0b7a98c1be3b185dd44315a6f7eed6e1958bb0365897ee4439d84b2045e0079dad84ad05978617ef1bad3d9d30452674c85440e3aaecd23b254ab971cadaa2c0956b84f7090b91f396e48f489bbb2134d4e2e363a7ad63255ea98dc5aa7d7faa1dbafa154e008fe50788b61a32a3a11fc83aca26206511c220987afd293f5bdf892e6c6ad260bdd178109e15c228fdab05e62bf2c97220e886a780c7268ea14f6e352e685ea51008fa6457444ba68cd3d4242dccbb0b0b74920e08e7abd01267fcc655337ebcd0b42a3a2ca5eb1c33e36c4e579e4cb7413e4b21cf884c9b651c902b235e80e6af362204a2e28e8a61342f2d09c7a93094b530ac7c550dab1bd7fb2a329323fa07be77f472adac404633b51f03ee34ec7161766b5ae7d68462d0700c43c0781a6f9ddd2a2408614d400b07c97472c9ba5fd5728fa34c91f93755a00b22ea772261cad2b3a2249e6a85f0f648e0b72003cea1b3907f8b736238c2dae650e0c1c0cfb4e4f8f7795d1755e1b00092ead964a00be1e3eb187bcfc1012980151c3f529b14c91ccf27c71840d8834b93dea8e42dbd722eec2b9682b8556dfa06d2cd3eb4cb3628fe1baf45185b47420ef0a65d1ba98f965fe112e3778edcf99a736d6fc2273656aa031838ee8cd906ac3ce76ef61d3fee391f420eeb08d49e8c45ba977f93e381863537f07a12e66863e2c91d8ceb03cc6b0d65e6236257b2b5c5dc63930b6b578ad615ce4723557231870e4f30513bc71f71d1de8f4ba67a1fd9646a982058019b93ff01ad40a899ea66b92a36386e54b154277fccea290fbcd6e8f6566e042f20b14a2f6d8f1637f3ff89630a68574aed295e0176906b8e0a9ef33861a2e4c836777a4943ce4d8b1ca977b005088d2f183c5a65b402665e052a71f153bcb91f801b5da1448a566964c009128dc15e838e99026ad8d54307429de93ad8c4a2027687e6b7b68c38515eae8031641375c3eea8982ef0351641575df03543223245b19185b4023fc8a720bad87e31e3bfb054d442731777ba46707e9ca4406e2dde03fb4740b9f0eeff9056b8da7f063a6449adc3d940e84815d0c187da26864f5a11b7b4f1baf886847f71d0e8d72519733e36a7283644eaaba5af43de045b8c676c0b8d04c2fb99fe186c90a6a8e341288ae82e651d3d6bccf86a4d6960593c113640df88b3fb1733d766067cab861b81852d5d660769b949ca17fa9121815dcaf79969a4342baf6f7c3f8b6499d70d3faf0dfbdc1ab4da904c94c4e74de232b1387a899b71bcccdbd0cee4d1c6c64b5d6b121595f7e4957854dbe36bdd607501a82c04875ace1d24bf63a1b7dc8c55218de9e91f79917288311f6e4fe6490b6c3d4cbfee10a136a82c31c2914125061d5e2c6147b52bbfdec3600c7492fb008fd81bec824c9bc34e241963ca62b39c1a09997eff9527ebf5d25e946ca6b52e387ff8f3db34872b5706771fa384b51dae3c249a2b7f96f221f8ece093100e7cc477566f95b50f4a96e78d1e39fc4349c587af19790d969a2544d2030f398c64c85ec1d8a97804a6ceaec188d9546426a71e9b2702eb0baeccf9b4c99a8816dea5589afca48a5ddcead0d9672be35d487d3cc978f8efdba5cf48e1a92384f2d8a9d2af0ea81cc34dc5f705bffa1fbc37e4055ffa56859bcc89b1b8c43a3fcbf66b0fb64282240d1b8978de3eedd335ab632a062d7a17c65d28c2b39b025ac1548b9807332dedc71d8f31a9d07358737824a898b174f176ff3bd39e22154dfb448639bccea5d10c95249fcc729a36f17e8e29db85c5588fa306eb0e543c8f04b513a1f051358ccd7949a35290f97f1b791de11827e3114ac983b4f7ad62c6b6fbce40c2d99c6b473e12dbd16a1177d0bfd098b9ca870d6f56bb1584325ea82a214dc1ceefd36afc962b7bfcad821573f0ae76219b1891c11a7790369cae60a4be375ed38ce1fb72902d3eca9ca1bfa18a1ddbffc332e87408819a13b86b866fc5b488c9cd3af488d9bd3bd9885207c61a629101152ce688904530446e1f535ccd6d25e4e8ae519dcfa3efb83570c15b4c7b996c1c49ecdd56e6a0726f606f31ffa2fc94aa62a6c735da674e1735d96700039894e44ee1c7586924f6911d568b24b19f31332230bd52cf0ab770e8dc9959af994e51c58a6784eaff823750faabf226bb2e62e09475b363698cc630c8e42643fc8a0fcbc6fe56aa6912a276428b88b769a106388547f3f6b47688ef87ccd45afba2098fc82a260172e845fd0c775f97ec853c1622d0bd7ad5794f951144442be640cd84fa56f1688a1068543844ab70a769fdcfa0bd1821eeafd920647d53fb5cf8ff0c78ed9388191e5eadaf3c6501744b957842330bf00eb84cb4aed0354c63a243dbd18fae1d903fe8c1de6c8f78246aaa8d318c573f07b81ec3837903ec094de7d3baff6ac857b952bd869f00a5169610a7a6c8c827bf079e52bdb7ae3b6c748d9a3d4b977ebc10729c27b211d3b3a73d01112e8d506fe3f0b0d98d6f2a109a88b8befd470388cef2b0b3d2046865dbd176d3a5f0fcc83e700b85a50e1c2ce9a97aa7f19e7616048e20f11d70be4b30b7fc92e48e88543985faeabbb0304f1a15f7af8483c694d78cd6eacb530d16c947db9b5e4fc5cee5827cee8b068873724a94a6c6d6a98929b5de9ac757e51b3875595273a095bb1a09e870b2618d88ce4d0e1a6a41cd189c119fd75f4c93bd35956a54b6006e59842fd57d6f0dfebb3ed2a2e898ee21754117f4dfd01df71a5276aed767ba29193dc1fe34cf1a059abf833c4e4b03e775a3677e6742b162bf962ee3454a2ca892f45a125f11bddca4d9c9f91baf4a633a777324c2826c370539af82221609d357446379634115a3d5c8d3238aa274bd94de03440ca6fb950ff948d9568da036bbbe3eb30b004d9ed48224bd542a8b916f389edf3c84480bb1d74b4f42dccc05c52e396888f2210952307e99c4eb4db27ee557db850f6c4f62823d46b501548d7e05bf696f447bec5c678fd1421f494f4806357c27e0b1c2b7d653de0a5a2940354f5a7ec2c00a54702b033b58a81e09a75d914c74f869ca2e8f07d2560e60f644a18b996babba4735c7c55e957ab872569f813c4ddc07fa83f855f573a513c49ac4d6283923fb0437e8d77004c9d0443a8292fa43e040c16e978f24fa676cf2964ec4ccfbba3e0e5bbea2a7d0d9d246c6f1a10a4ec51231273a510b2c27a0591b872c22f4f7ced0da48158011d1339912400542e5f2ba3a0e7f5605b0e1e17c76b3a186be109204e2f6cc02d9c155f8ef0d7bc5520ca56434e529ca851c514b990d8a5c97ebc0b4803e71899bda5b881637ca601a9ac6d4b08f3190c8513bbd966e963069f5397ce9ea3bfb43fc04dd5b70b5733c74ace1c72dde6277331c118db911bb2236fddeab6051fad0a9d04044c3704c9c327f558528279620e73073432d587b072428b9e54486b657d9d4f5cdd1787665bfb9d0117da360bde43f8658d81b70c854657a6ccd8dfbbb4a4f9cee50a270ef9109173cac4229e4a45e8c5f446a02ada56dc890bca6aa8e3b34858ea8ee9b2c474efc44f129f65dd1472ccaf6c61f795cc3ce70fadd3aa41b48159a327c0bf211efe92350f7ece8ccfb4dd7d43e3911fff754fa91bca550b3c8561fde3109c97073529a11d9124c066ae8ed4a1fdbd610e84a3dfdde457acf7f8bc20c324dde0422c5ee2fc094a0a4adb2cc79b02da2303d9b9d84b3bb323c0fd09b99b3a2d7648a487632c49288e433c09b9a23c07389138163ebeb328c03c58b4a2c984e3f6a41aeb6f6af93d79dae956e7e2cf93fbd3bd18504c1ec816d9aae589a08dd8a73738a3c238a3bb7ab6653fb8c3ae7bae0ab1538a04fe67f0633888d8e5543517a161c50bfac9855e58a84ec48cf6530fae57a423fe89ad103ae06e9f090dffa16709c57978ffdb8ef31782619415a46e68f84c4094fbe7015439ecb4b3314fb805646c7c5ef50dfb7dfe3d9705bb52fee1626d1fbc0fcb6b91035cf69cf811a51c066ec89b6b60cbda55ea4e3aa2dc3087fce113cb8aaeb1f4c31da8f546ea0e94110848f090b6c1a289b12ef2e2644add5fc0e03b0d165d43dbff2d2bb961f5c6a4b1bf389639c13b886833d2071b36a686c3f42359d53dedc22cd176076cc18ee48668db6714fdd4e5e99d488303aff1ec1ed28804a6d3226c4cc38df47930591ec61b794893dbd2b301deeca71d2c3f05d75781ece38bc88c2c3b000765c66c172431602c7199c18c1419f4977794e58c17da1ba7d412625cf485c956b97b0506ba26ad608820276f133426c980323d055e0de4ee6d68de5ff499f90a619ffb6a00267690da2b09c9c77e7bbfb6861fac31454c1aa9a2e54cd337ce14b46380552d21324a5a01545707a3a6b7c26881a5122933345f240433407927ed6751204c3c03a33167b334b1627a0aececa63b8b10a61c9ae26b52fc3ce8efa21383396f94d05f0989e60211494310ccd9617b164ddd798da176569d864b446eae226bd027d195581a4bdc7ca6cedf23786b5632b4645d23041ce69116bcb2267355cc50df1adbc20ef1be5f23e7d668177d1a02f701573c7c64d8dc7c9d091a2d55d0c668f390aa7b26b7c245de770730070e8255e2e488fcade2862eddaed88e1bbfd0fb82d35911befbc934d7455d428d382d66f645658761cb0cf8b3c1ff60b77ae0c786b1a06923de0e18b83864a87c415ef40514de913d639292acd2b0d757e7e4b82c1ec169025b3411602e112452cb24892bbaef6a84f1b2f610b196693962472e8b190ec3524b96a4e49ecc5bc0496c8cc10f8a32cbfd217625bb5a94e20aa7f77f9b2a96606980933294429104e5a68f40e01a752ae96f07d63b3261f577d9dee948ea597bdc40ebc0fe20af261f5ce3f36c441a0f0eea159c15b9221c8c5e7bb4f503f4b6a6a7c0099f266150a59d311a17f22f42cdad8c5fa1486dee11dbb22fa7910db7fd31104ea42450c3eca4ca9c4d75e868f8e4a3bbe5d3d8ceeb84eb215a0976d183dc237760b2788007dea373878a3c441b489cc2cbbe9dabac0e38d04ee9415a14ccebd56aef2bafcd42384973a52c21bffa3918cfae3b148375805431867862b977ac87344a55bce3ffbed3d3e2d3db5f4fb9eac6e79c2969755b268c330f81e404f71cda31c8963ec0450369866791b230209deef06c473a5982f361d9b54c85c49ff1e571d0b49e3bed438a44dd8bad3cb8514748b6116a12d7b19b3a2bc971f112be9dfdaae39a89f3021d980e5dbf1cba13be5571cf724b508724c4074ec061642078f26f6d979d04984fe77f57a2d380bfabb2a9aac03a7d9013a1d8315416f09d1c7aa9d9046fa93bbd49075455738c54bd4256bc9414865ff467b1c4e59fb372ef5e4f2ef1afe948546e166d72aa88d59dd40844e0e6e98f35867bea934f30632ae33ba7ae930f901cbb4e1a369169f4ff8834fc762645d8f3eecbd3f3f5d8a0200fa53996e95874ed3e345ae8d8554b6fc266059ddf82922cf591df9494170f480964c446c06b908c0394ca9edcc8b90c4ae94377065706a3c2aa459fcaf86902877cada62e5ea7d2030728df286162a2bcd9b8995667fc04f35728bfceace6627bab7145e33e82a0f5bf1d8c6801c444f7371d3ab9051c10e0ea59f453f148e00a25bb3bff1c5011678ff46036872f7b1de47a059f0c9fb2e647d8d8461614f24cb79f414f8b5dba98ccc1a06bed2bdf8e6011a2e348e22606c4e39531447a756c7866198817e2a40e76b0bf0b2bc93c116acb8d7d54ee4c4914bd0532a417fc0f34bde211f1017164c939982f9ed1ab88d15d7360c2b7211a634b5b46d00e19405c219130c2934edc57c4b897b1be83f8ce90be820ab27e540fc8270c4fb60de8527de431530a1c5949ad282156e2cdd5a510c28fa0ba79cd6db9977ab2239837fab695bf5fcaabcff46a3fc8d3b8073d9c00232682903e4a65c0a08baf95bd0879bdb8582a4beee8cea66879a963cdfe9504f69109cab5a087a3228384ebf61d9d65ed8fcc7ea278729c8a14e1e0494c516004bef28e29d6b405c900387c914bc282a5f2d296e48061f51590976d6da86e11a229011687d6524eb2b31a8b297a720a9ba5f5668a346473f05f54f2dff72beab16a1f4ca6ab5d4722132b94cb9b7f02688205a4c5cb90c79095f25fdaa5a9f4f85fb214b359a62d5088bcbb4c4551e5bd2c9c7ff0386ec8ced7ab9d50700cf0362790b70b00913d647c1a911cd327c030a7ca5f1094c17262afe1ed9a062d3354ddc098808843dcec589471d6098d53a3d21fbd65c7e7a44af16fb1bbdd2460dcdb8843b977a3e8501878f3b7bc7732e98bab6fce62955ea8f5d71f68131e079d3aea573180c8634a8f88e17d32c2dbc5623185de5a7b168feb4c9126ef51047c348660415cbe0267728de467b5f9f78e6356c48130ff933e2a62db296b046bd91deee78a3ba921b3b286f9d90929a404d0aba21c46f3eea6c4776f825097acb3a0c20647748e58c7f19834fd05b257d9ddca20b426afbd7db942a6a2a00584a17521b88b0d94790da6bae49c9234fb4473ad6cad801b46894db49c49bc5704c8f61eb286c51c040a035220f9d8d616784e0a34c581b14038903546a2879ea53d858606a82541d6b506c7edecdeb41f5545df31fd59c1dc0c8b2a400ab756f0b4668940d7d90332eb2b0f88f207fec5a1af7ec720113c6c8011d6fcfc864d25b4f43e29b3de2acc5af8bbd4f7ba90f248e044f6b07b2de094917256c72243855b661cab533c140291320ed4c91195e6c3cbff223045b6fddb3b2a951203b61d2e0103850ef6f1901eedc02fe39328ccb3f359cdc058e211ab6d1644f86e0e10450eab615293ea16622ba07d7d1fc6752c701f648eba01087da9d1e1814e65c716dc5bf407683c68cdb625d3f27522bb77740c1638ecf2aa099504189cfab3d714558a3532ffceddf9a3c8de06bbb6f2aace6c98f6eb391c535ef6221825b39780878ab0d012c8e363642500e21199f737332a5bc248ece26ca756a28386c3ac7f075a928b93871254b93676955cad042d50d689794691c21a96c86ff90f0834fd425689d7b14ea0d89aa2e3d024467ddd7f534ebe85508d7c4cd645eb24ede5c00978d58ef4581a49291358504475e7677b2372633ad06ef3f0f3cab1fd8272c24c1fb8a9e42e1716443ee24189469f98c970d1f7a445aa95f5fd2832f19ac6079e5a9b4e98bc3ca1245e9387bb49c372769479bbcdba69f1aeccc75cde2432a9a2e060b14ccc787afb9e49977b45f42a7d90ed24f70b6a8330814f4f06d10bd9565b8641d20ea66c809edd11c6aeb8b7cff7967c26ee659271034b3e9e687a936cc4a40d7544011dfb93f337ca8d9d654ab83ee78fd0469cb60ad7a0e7963b7c58eba55966c1ea89179be334c88218201c640812a6ea005009557032fc51760a3c135d4e854aabc56cc7c238df157082f7771c0b890187311dd1456b6ec974036385fb64005c0594442ab3149f34433baf4b763f40c054a573792e1fa7453a5df0bbfb5b666dcb8a0389e5d2b0c3341241133fc9d640ae28ed413b688ebefb93c6e334a01260a09341caf4d2c3f3e3a65c950b167c7940de138b15b5cb4095399f21e7b5dfc04bac008385e8f2b4e80ea8d510a6684a97a3a590a05d5d9864053e02afd426971a58435074e277c3950f33242bef33f3ba1382d5974b1fd6e3b753215a3a664d409132ee806b050384fab2c1536e1e7db1baffdd25419d81a469b14ebfa713e89dfcc28a0d5cd3a31dbf786f24925c10cb8f8d3028edf8afa66daa51a6f7d174d3b428e75c3be9ef0c3466d50a4887a1adfacb9edff7fc66a6080da8572ed47c74fb661eb366f56600b72dbf584450e2c8acfae6be39e84ba34a9641d719b663151debea0e7abcbb729b347a2531fd387862527382e4daf5b07668caeaf118772938cbc1115faf0c9c6ae71591b9f0afeced6987a619c0b9b3ed2f2223ff6e96c279e17bdb6a2bb2a8106d018512963ec44c9fcb45737b6577241e517ef4d48f50dbe287d23993fd312d760ffa4429c12d00456b93667d3ddb3359ce72b49b6094de62165d4284e3596a5bdced17e4d03eff5e0a4b5e8f37bd37db1382902a86f8bd493974908791bc120aae73b6a28e6bce8e11d9042ddf7c640afeb106a1027d5c2e6a41ff8ca167666540cddde6471754c76425fa94547269091ae28f8c88bfa99ebec6aa8589cbe0c04c8fd70f1b192b063dcfab0d20d259a2d308bf064b6be048ee2b86cc007bcfbe9e547df3c6c32e635c2d0adc22b5aebe91c8ba8c98fde52a14ac520a5b78a7ed84c67402afa8371a113c8029230ffff0d2899206064421181cac455e03e56328a55174bfc33c35e30f9b72bf560098cc686cfb8051c8d7c685adf636af77b8474e1b554582a84e2d2df060f88f810810aaa01cb4ca646edb3a4e575a60e427c854d4ef3dec3eb86977cc28932a2ce88c3382bcd8207c4f72e3f33e037746561cfbc9fadab23aae4df996c238eb96fa14ba829a4dccd6bf2ef2f440d7b2eeaf9836ddf4fa5b15f031b5a561c67068ba87bf7b242b26e85a3347df2b0e194f353a5c78f0fd4e33af86b3f0543c29f38d3f7ff3a3bf9d17dbb5039a934e1ad05ac8c76564cfd1daf91071cc1426626e2611659625f2d77aec15cf9806e9e8672c83b8da405c3a93b9740a0c98c8a063865044b39ae0779b1e45dd7821f629da3daf4926da84deb33f17c6569491015e8ba50fbf07d7d4e1182ff18a483e21f13512f19a5a2408b41b4b497a78ebf715e083223f33dc6ebb740f3e7d9f6d84fa681db254a0cca1b7cdf671540f111e4e1359ec5443860056202434e1e7db4b3a99fa015618fbac7d1c1ab8676e938aab54a78bf09e7a3b9e2d3620232acf6a190cfa0efeac6b7add2c2ab269718ea2e6387e0afb79558f3978068f083a552fdab48764c76ff45a1646547e965e52bb512a48ccfca387f60b8ce8fb5477f5f83c0e3ba32696322b6b95ed9e07c872ca7eeb4979ce16674d2df963526158c58dc8c366ef437c7d0a2c32503bba2c6b6c516047664866d90bd422683ab48222949123c2e01bb2b5f9a2915c15887552d8837d00b8082d15f0befc1d434d12950cc11d1a097db2de9b0344744cfc667af3d0afc6dbac26f311edee2fe7ab84d464af0375499631d384a5d5853bcea6c27d74eb4a97546aa700d2cfdaa2c6b213068176b8ab510406b236493fbfb7a14ddbe406f2670cd67ab47443a1b8beae0e1b42e292c2e136111279bb4b26812bba406239b7aa2bb376dfd9a8666919c3d262dabe9d42fa3965944792ffc2a79b54821856f81a21af9070a9992a57bca9d599116e1612b7d755c29459767fcd8d638cf250b8be4d745318da8a98e1eeef7b616a1722276eb8617d3d5faf18c437c93e485082e2036e9355546f8a2f56c845ba918bccc05735b51cbb5ad6689ee0ac1611c093c693db5fcdc567a4e6b8c68033234c44761cd7fef0e9cf6de9577384f322e282a03f608a498719140c53e65ed2205468a12c085186db51e83c80642537eb0f4828e486b97e92fbb2fd6db4d0acab14346171d9395a4fea96213757b37182367677b338e8f7da564aca07e5d33f10f6f89cc120df3edfbf9d1c319a95140bc614d206bda4dc8688f9c8c5fea0b4b88fec0c5ae8652e9dd029ca682ad2208624aae1967039bbc46bd7e1ba82e68f1c12684e231d4c0d9cb44181b6503470fdb8fa06a12202e3efca7999aa8cf78c99ec6fb75aa8ef3045053cf2636d926199d8122da0c447aaf533eeb743295793e2dfb54a5207c8b99bb8de208db98396d4ea48b963ef2bb09994562ad084e8e8145d63ca5cc5f6cb53b2f5bcaf3b910f2e7cc6028c74152cea5d21cf322cf14dc699c1c62cac7aa68bd754de38bf42a04267baa107f51435b9438c9ccea2f8c66bbdef53eb9a706c0fef013b62c08d5429abcc3c9e97c9e8565d2de343cc54848eac3ff42a81d3ec4c5ea3373072e9a3eee7d2a4b3b442bd1d0fa73891160f3417711fab13da424ab21bc4b86f886c25aff327307701e937fe6872e07c8b2163973ed00bf5ad326004f42b8f82f85eca960e79652", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x1, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, {0x0, 0x20000000, 0x20, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6000, 0x7}}}, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) (async) syz_fuse_handle_req(r3, &(0x7f0000002140)="3971b0111920c2caea5c9d945c911d942057522b2775b48dd19c7e86cd727d9998a684c11fc93ddcd16afe685d84465ca77ebd4d84f1be88c044409bb411ae592ff1acfb0fbc9785671856ef28f8a23c4386e318f79b369d6512e42179a534dbfe4cedf4f407aa1b0a0259420f3b5329b54d478201fa4a81a27cf6747018ffb5a7587ac88c92599a289f49f69b650b477d288a42ec8b3ce848cabe6aa28f6907a237fe8851244ae5552670d4e8f43c2236c54cd56038a19bb4f12037343a29ffa00b956bf8d74196ebce238be4ab98879ee3e0db367159c046c5d9f58f141d245947c129610c79e26821b4cfcb11baef8aee9d797c356f0062bde33b9de24c918ac891958338cb16cc067cb290874d6803a5047c49f6095001703dccefc86119185ea5806cec34c131fa3201d259455fa548a843f10c8c711c06682846c5a57d44a6dcc04f47d18ca8e5f4076d39f3d8335b6befb5a4a2a20007dc884e8db1b9157175f4106be843742329c14f0e6aceffa4a987fb7f0de548867b831384f4f5430edead23c3c907e6ea10e71810e2568fc496bd0190e5375e1694bdf7ed08b271155223318b0f8b8c0c32a1a7947fe97a746418abb8c9f42bcead3bf243553b72004d214d27ae9b2dca3641a6c5095077181cd93d2cc0761bf20b0545c9e9628901ada4774532ce1eba9da396806762e6218239177d10c98994beca8b33b2915f0be78b772761c4d6b37aa98957947086e7f7450bf7f66ed0ef87335105edec22dc95a268db00992926c487b3b87408bb1fc0a585602f3b336493fe5bd827d2306dc4603982c596e4f15302cbcfd0dc09baa22cda668df274b190d2c93ce12c49e36c840f786e8dff9d9c391a6c22d110689c9d69c4f8bae0f3a9f633cda803758366c950395cdf5047eed80859e09c74005c639ee14c894c2786c4f9c66a11483cbfa67a98154d4fb405bcb59a2a4c39542e49be6728749e712dab47db707e366869592055d4d3f68410bd76456d0a89b9834f1b98a95018243ea75aa67ab0a8f1e1a96b97c6e91664e8a66a5110678a1343992fb32e7b99dd253f320088099ae4aad45e626365effa69a6bec755e857abe147c319c216b5f7ebafe3b257357c1b53ef1d4c8ee13cf47b6cdfea8d8bcf03b8cc14c19c475e021c539bd0ddce507c4821b2fe43975de8345e0f16c7b2c1cde64095a8832853c82cf1e517615aa59b502665a67c59f9f064205917a5e4d24d60b67a19c870fe3c6a8c027b853b2fb6e9098a9d8629b413f57b50792c4e4b1dc758d5ddab78e6b86f359daed7244351c1acaa706ef56f402ef4fdec9f9d6cb32c754a1c3b15542b3d544a675340beae493eb4a7ab9d98c7327dbab2aa6f22dff065d82e3b1c59710823416b3bb0196767a712e59f903b280b57b83cfc0a753fafe23951ce25ffaa22e0947303817cdd3674243e3fbb87cb7fccd4b2e9037efffd568c27568e339d355cea1302c8e9a4cd2f6f71b5efe1ec399174ed02ce4d99f5901bdec2a9d347f9c035c84c168c7da72f114790bb01fba6b2d40333c3f0d3b6609fc2c7cc2c1bb2bf92c2a727bda8585e68f76d5adcce72b5487988e7429ce15c1d5b144d498024b6264704c7c167f0c8927bb2f196c3c41d447684415aef5b6e6ab9d9b98e48115153784b5cbb0f7e00da9b738f6a39ba3a056e8be0dfe67d9b123863e2a7ff13f831df19e981d9373ceeb9aa3bb2f16457c16d3864a85b4bb203ad618c9041be664a62b51ff388a8409f350d8c64484a117d2108afb176ca06895f6fecb7c1ed041e224e444734e5297a4e9e1ed90567d77abec03cd6aa26f5dc4cb3dd2cb476c6a845301f6ce7581dac61fb4d13445aaba1571e8c816df3e8c718c2cd1320939337ef9daac02e426028e2c8d80ebcee6411452fd72acf16d7e340c22999263bd8b25d0ccda89aa715c20228b6c696c27086e8aafed39ef01c772a0d2351c77d55689faf0403958bffa8ac3d5041c4ed03a0b4d2d4ca7934058a2ec211f4b21760ee2245d5bda3110e6dad5136a1c2a720671b2a0d2aa25013a95dc4c758962ba05166c9307b300ce2418e925cd30b206d10d6c3eb36e190b155b62aa8781d7d66d347a9681a9264d55089d7169f86bd0fe077b1013dbae17e1e4aaef345d37ee8bf54464b0172227577f754de2ce5b6eaf0bdc0bbf773aa3045b664f349165ab23ecdfe7feb1fe9da9c88ea4ba55f32307852b553ff5c4c314ce87e55bf1c679b16dd0837f3e91406cd67a8fdf51f774cd034fa12e96f117bb2f707c883309c82d814c7abb461443b1523fb4af418f2108b9c608bcda5f1343c19915c54fbf2ac8489b094a3a0cd5f8d2d19ee108b59f2436a6efd9df826a7dd6b5610983b8423ccedca5e5172a9464d1aeac30c9a65eb6322e635a97404b1d1347a7e51538239e20f42e7b58301b80b17b7a096ca4c7319da4e0ccc5c8c2a3e56dcdbddf7c246b4149e855227aa222d08a8c06b3c3ac2dd588803587501cf8f2943655eb0d710872bd46d10bcbbbb1a92d9182d000d83574b3525317e0e35addad9fbdd40dde7ca09a641942faf98e9f0f117e5ae6e1b1f7731a7da37d2ec88fd147a8d64c57d932e72a9dca89ceb665974e29d092de4bd1e8db9aebeef9d663c5360bee323956e1e794147cf988bca5115e1cdeb08164199519d56da562188c90128ff6bdf9a56bcbccc7225c39d953866a4a0aea79404a2153201978995784ffa2d0fa41e90e1e0152e2cdf594e89a54464cd879f9668fbc4f52e68498c860f4483ea4872174870f08ed05089c7b4f9eb411513c408228d0d1686a69f78e2183a09671420b413c8de51a1575b35d67ba61da0cbfb62fa86e869ff862d3451ef199c73829d29e5232d46a76a846e7de15fe42805d13f2cb239fe0f61cf6419de5a32ae58a05fea217bb0553e6150c34037ad07fdadedbe8df4dd2325e1054f1399693462154163c8e04b393f0d22765f13b4014a74a6f4442fb063bd26bb35144dbab51bf2ed3903698e2bd0336694ba1b804574ce14532fd971b5f2ffde422f455ff8289d47e43f183dbd3fb5f2a97215a687319c58ed0b0fbb28bf560f86138d25c0084abd720cda091b159e56fc214cf04c86f0eec5dcf3ff9d3d5b0c46916dc8956a0978aa30a7795673a35fb0815a399cdc59feb4a9fbbd34c184c6e045563f3d08c04992d322b1b653052da6fc074a94c006631e81c57c4ac7fe39a12c8c3f5825eec750c5e539dba8cd7a4e3cb32636d96e004bcb58d6baab1b55a3f75fb138aa3fb44e6f99ee81101adb7bd17ff0fcfaccb939382d470de2689fa69f1b15a4c94462025c124705cd480e0ef8d405a66f25f39aeccc39c13a0e9c4cb9c57165d95bfbd2c8b1406c1f79414d0f2c7bbac29f49386e299b0c3a05e1416eb6f8c0235c981ef9716ea0648be8ce33462a0d6644bcbf15e6f274902c3df0beeda20b4dae2f8660b4eb63c5abbc69faf52b2fedec07dcffc588c80bb3049350810bd3701c5f0d3f1d3bce35c9265d5b723bb39e814b11fccefe53ad942c28b1a959a47c77afba70766ee2f85f1afe47e9f6eee49dc4eca80624483fe87e7da02a16efb351e84434aff25ca31688dee59159c6f8bb57c314bb14a22535538a92bf9d6fa9f0b7703b5929274473cf4f8f3875c4fdb361425c851f942189fdf3b6dbe7051caee082188ace9f68173e1a4dbdbce09f2c3fe9eac612ce330199fd2794478843980a16c73273a345a98b7dab9eee77361887ad0bc6c1a13c839220a841dad35a22896ab31f7ed96d8ac921781bbdf66e111a2513d79493816adbfc679d7b8d23a8a7859f60203181b2a39d0472efed7ff3a374b61018a98a81e1d1b7b5aa4722db260b468df159fb7148bfaed0c780a1846f8ee6b0d22ecd140b55a3ba6b6351e5658a2a398c3e09a03d9e3e57318b40d565baca2b9f2e3808e52d8c6da9fe39a10fd0c7b2213ae696e59fca91769ddfa217c438334d2fb8af5c194cae26c4d07166876a8d11874584e5d5e4cb5c79c8a8a5616cf88eebac0a5314a5cf767d84464634640d3c739a4e30fafb016fa80b7fcd624895d4969da2b86ba68d15e1ce677c05ce24a2ba9bad50d5b04dcb21f644e3d56f9eed1fbe9b4c83dd5cd798b6eb67f647f948d2bc17ff639f983ed5a0145cc297fb2c61420d31693d8dc0873bd01376385adc62db9078d3d06c44eab217429352d9225b401dff5d6276d7c8487bc56b26f67d3722cccff1fd326f6de66b139434e19a2b5fdcb3b676a791ebdc39a269ff545137b9b6e23f9ccec8d2a70ea57b711cad1c6b4790fc8ce1637e3a705cc56fb68f65daf572e022b79d97eb417e0e964f7a2dedeb2a3521d564e7b93eaf56e2730183f8de0db88c8762c5451b83625669e1be1b72ad967f3e70d9f1776315d7dbda874ac6099bfe9cbd5a1a4932ee3a89557c5b19ccd02412f023faf4c301123af177ad26809efc00530e9c252a91c0e2c7c7f0ef38e3954dbc7512aeb51e2f98c632928eeadbbc5321d44c172dc37b678e695cb90bb53f879e5a848097754c669a957880287f26f96d60b37ab9fe3d4a290f64758da06818f48782bd2e0ac6c67c6704cc9baafb50ed0ee0cf28d032e798babbb4ec7733d806ca9070d6c7b3b3bb08b628fe2bd2349efffcf65fb54094e8d3a294b24add175beb7a4f9345dc914e2fcf0ee5956e7bcee272dde512d6885f1ae6bbc72995cdfebf73114cc49b87a9759f35abd805e956066b29cc9507b5a1cf970434b072f7ebb3aaaba6ad9ce2a7eb5f5911ebeeb0c9b1ae57322d417709138f30f39508a89bf6fc2a19f9a05cc33c1240b996619bafd0c511b9fb355f6aa9270a3fcd4c23c5247f02ad951ed2690c4bd5c41daff2c7851eb70f2217be83723ce6a390aa32d0a61a924c92d0b7da29b88cb307b7ae2fa9da51e2e00a20fd383731ebce0c3cda3cc7307f8823df05c5bdb44b3eee3439ebcc66929ea9b4e53b03504f7907d2e9a3f947c670ca7aba54d1bb188c1071aea6deec326ec2e014fd15e7913bb893bbd9d0106d98101cf6c4631b6783b721010e03bde3e51efeec8f4dce6b470b4643175d37480b0954c081e6b6adc55b053be52a86a680a635b2085252ec218096d432400e92ccea58ec5b867a43d07e3bca93c14f2617ca4afe1232ef559dcc512f03220a1ca2e3d0dde3090111164ca53f86377a38af491a89b0283c75da6cc682690e74679b6f37e2628834c2cc54afe80b40026403fe0090857ff86c435b20cbb9fc81cce7fdf245ce384681a12c688cebef4d81871b25333642845dd719a8d2299e9e53f41bfb98aa5eb7cfe8cf604a7761f2c1406aeaa6f5b4f598e18caba94b998185c2366fe678caed2c0ccc29a636bb270a41d859e4160edd705713aecc322676617fd55d758c7e3d66b83526f36f54890faae33a2c5a39f1bbd09baca984cb31c8aaab9a66f05be9796698f95424e786087af3a10e7b36d32de09d61cfcb55014e5a34613d6830507dbf551e96d029a0c3d260d22b8fef38c420e7da2744e2559402a91879cd201885c3199b34a1e0071cf32a43ebc49fd02ba7e44b64b298843ed437f39029e6d3157bc3c2cded92db096e5011067a67bde535c4406292b6e6af01e5a6ebefde90e35bf425d179102fae0d5e0705d4ff2cdb8a49c75f8915094722e4de624677fb1bbf72c978973b579a885485a5c0b49d851c0b9484ca790f87e012d4f7f1cb791348d35330c802a9a39c80bae1235f6d7dd73f9dcfc1c907badbf9b3829da2c2e428064258a68409566ca0d295acbd6a0c72f40f62bb9fd312338ae9ffea0f842faa04d49775eb5dcf715e91d66941ab628039829c4e6cadf6d2f5adf6df364f5f3d524c08aeb8886f113a485f5350c28c365211f766e19639d4ef57968faa57bb7c42e9e82a02c63bb30195a7c69c8c5f900a5cb391d929132547ebc5d17a4c9586ac1f308f393f05e409e9fbe37bd2f5951298f50dfb24a8f4c73d6c8cf4aa8d64708ed323e2ddfd794be4b81edf332db0ac2428f3842dd192de3beb0fd61143282f894e97034eb9903c6e8f8b83edd68785f533860ba2f309bf37e82ef5776adacbf3a0c4cdde1286e0a35a76ea37bd6e689f0d2d49ce90a18ec5891a69e10eaa40cc88bf0e4b8fd6012de9c522ff9afed0d86cf644d8fe7268387cf3648d52dbd23f86c4ad61147d1e30dfb4dfa765bb55ae2031f7702006e0450aa0576eb82fa9e0b9587677eecf2bd9c405bda7a672ec1e7e2f241a07446eafd5de90b67ac15d45804bf0f0411c0e1cb1d08066275728eb6eb35cca70e64d678603b015f3f8895e819a17e1a306c75566fba4a72d33e87ceb8690889a394647522c34f8914bb3a9681eaebff708c6f3cd5cc5b9cb753e97d3b67977e0a692c5b1d93665f7464ce0c609fba020fcd6c9ff8ae001b92774943be71b4222f083cd97755f98689a4a53e2c5621511441bc6b14febdaac2f1a2e8656ab7cdff82ccc933807cd93b29339191d5cf8dcefa8949a8946456b57719f559ec8566d73b5637460c13dbe0dc74870a74ddf6153f70ef93191e9aa5d70570900d4354126511522aa2ef3ef390f857623da9b0da0c1c268690dd446f7cc79a1825f3052e882ae7767c7a2d0adb544c403397b86a717035c93489c296ed1c000201f0223cb060e06c055b0102b2cc06159112b3cce7824d1c8ae12962c7b26adee470eb498b4be359d4b04e57f7ff12aa30e0099d482a69aa2eec02fe35cab0f4ab5e793e7605d8277b381350e5f26c1d67cb42ae13c3a8c4d6596f501a3ff729f320ec668e79b9b7ad776886647a524752620272cda7fb01247542e7b323f60deea0a09d9828753a6fa793e1cbded516934a8f62bdce5ea726c347e3fd6bc2d9d4b2e8aba2b93a4709b8a6e9be0c03759ed82e6aae144eef74e97c54402facf7b4a41e9218ae03ceea8fbc37550101bd6dee6bb22c9ab8c0ce2eb6157d81db2bff16a3c9c654bdcd14a1b7e86c35538b0ceef0653156b73996661a0a086223a09db37edeee093f7c0219a78fbae5884ad82337f42fce5c3e668bb6c65d94cf159c931321c1383c4283666413f0c347e236536dee07278c3f345f277d29dfe204fbd1545078457842b5969818c29ddf7003bf604a203112e03dedad95efacdda1da0ec9a7849c23d3c63588f7f60259a8a81d5148ebe4e973f2205a971e2322bb5fdc05a6d742dabe40bd9a0e2249b5e0e9ee213d0cc4fe3195fc6ef7db391a4cae0144f89f08ebe21d7637bcb209cc6283d6b2a60832b1e847154b2e2301ca7529b0f726a7778b94d90b6321097e4c031915c8504e73c3028c8552adda3d767c653bedfe8ef5ce493da759df591f13a0fb7ce59e531ffd42217b673f02618f400063b62bcb789cc35d7256e68e8f6ca88e93c8be5fdd9c588a9cbf8e953b75859e3c45ad1571f90f1d958f47ceb4f6fcbf4d7d1f4de7cecd1fc7c5e0eb9aeb7de54b81e608ee9df8a95159f2d16620159ca44bd5c0be1ebccc882d8534c29fe17035fc20ab009d283b4ee06051e5b26eb49dcbb139c1a8bec4ef9850aa60e13e199356ec94cf4ece244088429620dd63ab59795dc130fd09aa53bbdfc8d34e513f632c9732e4fc7979a95d54ea47567207e0bf68cc37cdc24b7cd651fcb933cf83704d411fb1ea5f6faf9baf9875492ce73c23c4de9288b01a2bf326450f8c3ab3c9a35078c3be22ba20771e8cbf5409c6f4aeabbcdd9cf50c859b574b2be8e853d42888578d5706fad855153b15d71e183ede54400a6811acc9c6a7063b87214cad25d15c639c76e846d4149fa6f8e37409ee6237de42c72dd3bb0cd999e0f61363173373fbb4e37ed7b032163f15e85ce5b0b33cc028246ec35b6264f516cdd91b8339def02a10c67407e86abd1d7804b83a1bfef73f03b3e2054df5210b5f01d7cf9cf966143c1539038923f253179177716e04110e731d4bbda2228825c934ffa9f1a34973a290326c7e6da8534200afad4cc855c52a57273f4cf1b7f93070d19843f4f00b93f7c474dc645651ebdce4c929260925ec7fba46a9c2cb309908fcd30b07a950c97db42a156ffae07618d4f6b0256705442f2918525796fc021b0bfd3da4a8bfba7b44425d61078e7ccf167a20bb09759e1c35f67817058b00df1f6585dbdbaf311d1ffac025523e903714fd74551f6628fc3af4ae4206235e2f61f87d67f617807e87a3142bfd4adc62f9016a43714dd65ed606c293958f265c13017c3bd9837596c5a9e9f1c19da55191c9d3076b58b4bd7602ad13e042abb44a555f9df7f65c993339c3f2fc2dba9c8ef70d84c8333403eb19ff140f704863235d7a4c9219a7d4773e8f08529dc27d80d56aafb206402acdb7a1410d89c387fcd0485d658e006937879122b426bdce4c92d215adaed08380251f4d55946b7f33d15df874c75a2cf80cecda902edbe2725aa43c04b2fb1d2983f2f8ae5c1fd9456c399511d07efd7c7df299be0903f2da74b965726afb2741964f06a4d711ed1c6799e29558d54db7e59efd5022723cf2e43428548bc96d00363fcfb19ce259ea657638034210497359716da61fea52ce0db54af4eb241619defe3014d5aeb08b8158f7aa7838bea3fb41d87ab397553a77517693eb304f6d7ca01578f2ea4287732636a3d230fb818a92440cc3b6a592bc8d2dd0cf24204440136de3e2412da3b26af939aba20bc42d203e39f7dd2e13e69a3a74b6887b2fd993842f1076ddf0baa46ad9d2ccc432b6225e6e858e7bb208df4f9c6931e27e758cb23e0338859de99c3829d9b40987194911906d35e2e091d57ef6f7e495ea9a2f64f06963db9c63fdedbfa7433d89a7f19b4bf06ccf7682348f6a4c37962cc96fba92ee89e59b1e79a9710652cf9c2e0aa55880a406b6359d931881d88f9461a85a2df92b6f1ffdfbed792e097d9725a63ab037a5c750aa8aed4d57613951c5a11869b82ae64ffbb25e0aaf566868674005ce81a4c53abc3c526d48947ea52c0247637b82b6bab0432d25d508503a3d9202440939ff3ffbd845acccde7bf03fdca8676ae328ae10148345613dabd3686c00b8c0554a2f1e05ec371ffa881286b0c5bd5053e02f801273cdea5d5e1519cb6521c47208a7d3b20fc38e8042c6dfca02910a39d8c10196c735e902752c427888dff8afb77c9b6e547b5dddaf23863d4881d8d059406aee7798aecc5bc479a27202c2d6e4a10703bfe40fd210f52ae90f251f78599fceefaa0d6aa56f2dbdfc23e140bcd6786d2417485189d2e4bb6b5039c3ffe7d8043e025a62aec08c813c4888f9db9db9b439f090744b23018a1e4496d000fb338a3faccdbc44edb7546f5f217daaf56b096134b8f5d6a80eb76de4dce07eb12cc49ed1bb32864c6434196279e5b8859aeed8a7b8ef3218967a0d439f36632454b633eb87cd0651c5719d82b841cdb126535b196e7977578ac19870d65770d0cb8805a0547fce9e73646f3b7954a58e678106a66f0e39bacac52f44580c06f98bce1a55d1f48a11dd6923d6d657bfdc955e3f77866a1956b53fa06c6b21165379e79497f01d6991cc53b467405ef6e43feaa5532e1119fc3567fdc19279a0d7af4561ed92b0d404c717894784a38b3a626f0e7c134f5d23e4aa702a3719c64ab014a55df10c6b10ec3ddcfbcd7fa6e089bd7324fa4ef8996abbf63cb1ecd57801b7a1f997e3b1d4cb03256a34f39f877d6819a9e8f55261a7270f024dbb534613d4a2e23b0bc572d6195cc66580f724f6ba67b75383c22aae0c9e375b9544c88386dc51d5b26cc93e3ca4bd7b450db3ceef937132f9066827768a073ae3381dace8a155c8c4d1efbedac767028b2cbb8cf7da62e8e8fe63ba85bbd2a70c0b503ebaae2c8b676e73e85cc7734d91fb46f56413c722b0707a41ba019b41c9706deca9d184e8c415ecbf2130592cc06b45618fc3cbb7eaa58c288d1971b7944f2664425e734d8b6f3f0600dd1f96048248bb5145256c1303aae4912a2a51be8c5c4c0936446515b479666d235012d6c142d62e6910abdebb8ea719765ed49dc8f74b78251bd3b69acd031d2df8ff88d1767f057795f969f4a6ffb4024a79ad4d3f566d1227049e54702f934ae042fa81dba347fbfb33c4deba3e3169969a6568cf3924ccc21a02445ebbea55173137330e8cbd777cd610d56e535c814b8d8c30314e0e8c513d77d6bdcc96d5bb74e5e893171e1d6a5baf7ce0972cbfa457713c49702bd985a57f3552a7d3f825b85f81964f1752570bbd8ff4ede5a066b9a0b65ffd394fab84390235ebef3cc9ed1f7aa6b137c34ffe501ba0be579216b0ad9126cd6720284b768928e097b892c66d12a6a77af8bd71873639f42545352bad0e1e16c5b72729f634e1040877f072119b11ba7b70ccae7e7c79b906c99e71292a4b2a6ab6693e057077d25b80b6bdcb81f8d1f0db532cedb2d03500deb072906070bbd0f30a46dd7ebbce88fb86fe04d7bfae54e9256651b2492aafbd720a193541e05895ecf79ee5cae80b3d37064145f28cbc59b701129bbf1aa227070406bf34c62eb71f5087e5907178b6b63f2d13bda957a875469fe97dd4db991366d82bfc77c9f05866212242f9e3e325254ea63303e7d32d1967a9e36f460b43cb0d28151d2b7938097886ce3192a32babb764754f90ba72948a9129bc75e677ad152d278f629d9c14d04fca7b85cea491dd592e2ea7da190149ea43ae9c6a6f9ec1bd515145977424dffb2e96cba892c716f403722a8cd9e79a60769b15a3b9c9f27f77cb8c005980c46b3baaf96ff65edc7e9bcafe366e43e381a904fbdd385b0cf1f64b206428de9c1cb8e1022074c504e91bd201065f2d5a78534cf8a35d457a5113b8d4994e4b2acb18b65dffc048db5c1b60597941cba32d8cd46e6a01d4cf38916aa1c83d7dabefaecc38ab169fd57d2e4a3db4a079453ee55473b320637c5c6a1abb7ead03ab1019011fbbdc1df8a3df4463b5241d44db5074637a8d8a9e1def67d0a9fd3f5dc655cdc45d4c8b0e0ba4d284984f48eee6da1ab2de20b7dbe8a283dbe1e7fa6b385db082216b5d85b844359ccce93b81b0d6f73b2a1625de26d959f83d7f9846ac921796c222cf20580c78b3aca331a4d4e914372252437d76f13cb1d61102e9d05c65d7df80d9349930bf9edbfeb9ac6529834d0010a3f0034c02fb1681e4dd0c7230bd8e93956da3996143ede5a014c610ee26474c11c312ffe189383055523b7c6bb4f9257ee09c0b9f39a147ccc7a4842f7fec60f97316867626b2a7474c2affe8652517cd56c80a823604e52b207c24afaaf91db6f056390f3d480b7df8010d6e400aa1354b3bfacef3e0d4feb5f44ab8ce91c5e5434a9427da40bcc2f30fc36ba19a80cec0809a9bc187bb1fdb1cd107e4db51433a32d1d38993e8d73e8f5852d1790d4ddb9981fa2c413887e3e90d3949a598338982200e25e5331a5dc4aacaea504f54cc113ac13d2546e7422a1bd822ea9d2fe7357527e1ebb61bc863168bb762de09a7f2b681e7346a9ba4138cc24c5f7ca5f65c18a34d2ae0df097", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 17:31:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x48800, 0x0) r2 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file1\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff26, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x2f, r1, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0xffffffff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[r2, 0x1, r4, 0x1, r6, 0x1, 0x1], &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0x5}, {0x0, 0x1, 0xb, 0x9}, {0x0, 0x4, 0x5, 0x4}, {0x0, 0x2, 0x10}, {0x2, 0x3, 0x10, 0x9}], 0x10, 0x2b3f}, 0x90) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x182, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mark_victim\x00', r10}, 0x10) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000400)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2d7766646e6f3dd879ad75c9cc9341a2f676d2e01d3b686cd45a772ca83a7eb5813b74ddd60cc9d4a7983017139cdf2b74d1e67263050314ba2fae25cccb782741629de5383c32de2a100da4795a990fba97f63e7553e238d18aba349f828eecfaa51a486c7594fa", @ANYRESHEX=r8, @ANYBLOB=',\x00']) [ 2611.021582][T12625] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 2611.033203][T12625] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 2611.041448][T12625] CPU: 1 PID: 12625 Comm: syz-executor.4 Not tainted 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2611.051689][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2611.061587][T12625] RIP: 0010:filename_create+0x225/0x750 [ 2611.066959][T12625] Code: 89 e2 e8 ee 96 ff ff 49 89 c4 48 3d 01 f0 ff ff 72 07 e8 be e9 b6 ff eb 5f 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 70 04 00 00 4c 89 64 24 30 45 8b 24 24 bb [ 2611.086401][T12625] RSP: 0018:ffffc900047c7d20 EFLAGS: 00010202 [ 2611.092310][T12625] RAX: 0000000000000002 RBX: ffff88814fbcfcf0 RCX: dffffc0000000000 [ 2611.100112][T12625] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 2611.107925][T12625] RBP: ffffc900047c7e10 R08: ffffffff81b6520b R09: ffffed1029f79fa4 [ 2611.115737][T12625] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000010 [ 2611.123547][T12625] R13: 1ffff920008f8fd1 R14: ffffc900047c7e88 R15: 1ffff920008f8fd0 [ 2611.131358][T12625] FS: 00007f023b34c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2611.140127][T12625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2611.146546][T12625] CR2: 00007f023b38dfa8 CR3: 000000015ef2e000 CR4: 00000000003506a0 [ 2611.154358][T12625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2611.162167][T12625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2611.169980][T12625] Call Trace: [ 2611.173114][T12625] ? __die_body+0x62/0xb0 [ 2611.177272][T12625] ? die_addr+0x9f/0xd0 [ 2611.181268][T12625] ? exc_general_protection+0x3ff/0x490 [ 2611.186650][T12625] ? asm_exc_general_protection+0x1e/0x30 [ 2611.192201][T12625] ? dput+0x8b/0x310 [ 2611.195935][T12625] ? filename_create+0x225/0x750 [ 2611.200709][T12625] ? __check_object_size+0x2e6/0x3c0 [ 2611.205828][T12625] ? kern_path_create+0x40/0x40 [ 2611.210516][T12625] do_mkdirat+0xcc/0x2c0 [ 2611.214594][T12625] ? switch_fpu_return+0x1e4/0x3c0 [ 2611.219540][T12625] ? do_mknodat+0x450/0x450 [ 2611.223881][T12625] ? fpu__clear_all+0x20/0x20 [ 2611.228396][T12625] ? __kasan_check_read+0x11/0x20 [ 2611.233254][T12625] __x64_sys_mkdirat+0x7b/0x90 [ 2611.237855][T12625] do_syscall_64+0x34/0x70 [ 2611.242109][T12625] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2611.247832][T12625] RIP: 0033:0x7f023c62cba9 [ 2611.252088][T12625] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 17:31:12 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2611.271526][T12625] RSP: 002b:00007f023b34c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2611.279781][T12625] RAX: ffffffffffffffda RBX: 00007f023c74c1f0 RCX: 00007f023c62cba9 [ 2611.287584][T12625] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 2611.295404][T12625] RBP: 00007f023c67847a R08: 0000000000000000 R09: 0000000000000000 [ 2611.303206][T12625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2611.311018][T12625] R13: 000000000000000b R14: 00007f023c74c1f0 R15: 00007ffca4f74988 [ 2611.318832][T12625] Modules linked in: 17:31:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x48800, 0x0) r2 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000000201005) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1000000201006) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file1\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff26, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x2f, r1, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0xffffffff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[r2, 0x1, r4, 0x1, r6, 0x1, 0x1], &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0x5}, {0x0, 0x1, 0xb, 0x9}, {0x0, 0x4, 0x5, 0x4}, {0x0, 0x2, 0x10}, {0x2, 0x3, 0x10, 0x9}], 0x10, 0x2b3f}, 0x90) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r9 = dup(r8) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) (async) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x182, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mark_victim\x00', r10}, 0x10) (async) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2d7766646e6f3dd879ad75c9cc9341a2f676d2e01d3b686cd45a772ca83a7eb5813b74ddd60cc9d4a7983017139cdf2b74d1e67263050314ba2fae25cccb782741629de5383c32de2a100da4795a990fba97f63e7553e238d18aba349f828eecfaa51a486c7594fa", @ANYRESHEX=r8, @ANYBLOB=',\x00']) [ 2611.352124][T12632] 9pnet: Insufficient options for proto=fd [ 2611.442313][T12641] FAULT_INJECTION: forcing a failure. [ 2611.442313][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 2611.454762][T12641] CPU: 1 PID: 12641 Comm: syz-executor.2 Tainted: G D 5.10.203-syzkaller-00943-gf722f6ad16cf #0 [ 2611.466255][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 2611.476145][T12641] Call Trace: [ 2611.479286][T12641] dump_stack_lvl+0x1e2/0x24b [ 2611.483792][T12641] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2611.489084][T12641] ? pfn_valid+0x1c0/0x1c0 [ 2611.493336][T12641] dump_stack+0x15/0x17 [ 2611.497339][T12641] should_fail+0x3c6/0x510 [ 2611.501585][T12641] ? vm_area_dup+0x26/0x270 [ 2611.505923][T12641] __should_failslab+0xa4/0xe0 [ 2611.510521][T12641] should_failslab+0x9/0x20 [ 2611.514860][T12641] kmem_cache_alloc+0x3d/0x2e0 [ 2611.519459][T12641] ? __kasan_check_read+0x11/0x20 [ 2611.524320][T12641] vm_area_dup+0x26/0x270 [ 2611.528486][T12641] copy_mm+0x8ac/0x13a0 [ 2611.532481][T12641] ? copy_signal+0x610/0x610 [ 2611.536905][T12641] ? __init_rwsem+0xd6/0x1c0 [ 2611.541330][T12641] ? copy_signal+0x4e3/0x610 [ 2611.545757][T12641] copy_process+0x1175/0x3340 [ 2611.550273][T12641] ? memset+0x35/0x40 [ 2611.554091][T12641] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2611.559036][T12641] ? copy_clone_args_from_user+0x744/0x830 [ 2611.564678][T12641] kernel_clone+0x21e/0x9e0 [ 2611.569016][T12641] ? __delayed_free_task+0x20/0x20 [ 2611.573968][T12641] ? create_io_thread+0x1e0/0x1e0 [ 2611.578827][T12641] ? kernel_write+0x3d0/0x3d0 [ 2611.583345][T12641] __x64_sys_clone3+0x376/0x3a0 [ 2611.588025][T12641] ? __ia32_sys_clone+0x290/0x290 [ 2611.592888][T12641] ? kvm_sched_clock_read+0x18/0x40 [ 2611.597926][T12641] ? debug_smp_processor_id+0x17/0x20 [ 2611.603129][T12641] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2611.609031][T12641] ? asm_sysvec_call_function_single+0xa/0x20 [ 2611.614936][T12641] ? irqentry_exit_to_user_mode+0x4d/0x80 [ 2611.620517][T12641] do_syscall_64+0x34/0x70 [ 2611.624739][T12641] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2611.630466][T12641] RIP: 0033:0x7fe73cec4ba9 [ 2611.634721][T12641] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2611.654158][T12641] RSP: 002b:00007fe73bc04f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2611.662406][T12641] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe73cec4ba9 [ 2611.670214][T12641] RDX: 00007fe73bc04fb0 RSI: 0000000000000058 RDI: 00007fe73bc04fb0 [ 2611.678025][T12641] RBP: 00007fe73bc05120 R08: 0000000000000000 R09: 0000000000000058 [ 2611.685837][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2611.693651][T12641] R13: 000000000000006e R14: 00007fe73cfe4120 R15: 00007fff04532138 [ 2611.709514][T12625] ---[ end trace 02017e6b8b02cd2c ]--- [ 2611.725120][T12625] RIP: 0010:filename_create+0x225/0x750 [ 2611.739857][T12625] Code: 89 e2 e8 ee 96 ff ff 49 89 c4 48 3d 01 f0 ff ff 72 07 e8 be e9 b6 ff eb 5f 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 70 04 00 00 4c 89 64 24 30 45 8b 24 24 bb 17:31:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x40000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="cbce54", 0x3}, {&(0x7f00000005c0)="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", 0xfb}, {&(0x7f00000006c0)="0eb55eb021523fcc96fc9a456acd893f32126f4b0b68e30fdd3c6394e52939c456e26b6fdd05e1719953adb8385186a3067b920dd183594c120a35be6ee31db9b967c56f003c0ca6ae95fa81b1746bc302eb083e5a", 0x55}], 0x3, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x118, 0xb3052f7df3c53cac}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)="4ff08f7f96d3597100b234bf59f74e32bec955a7cdd34fd8398b222a67045605a0565cbf2d6ee9b251bd", 0x2a}, {&(0x7f0000000980)="49bf9c4154a6006ca7c2188eb6e6fce115628590a9d5a74c9e1b3a058d01980fcf424ba590b515d6ff910b92ce4b6f7a6de08c695a94aa6218b6e7b4cc0681f4c184a79c7b31d1f6e588e04eb25421b8fb1514f1c0ba45335bd766edd3cde49b790c6f2110e69c1ea11e5330f3f70eb5", 0x70}, {&(0x7f0000000a00)="2b1af684110f", 0x6}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000102000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40000}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="2f9638584b6b84821faab1d8931f86b2ea52bed494675a1e8bd9230346f0b0d5076c093e7f1564c301a5020956947720b8d674e15faf981e42b4566cbb36790a41f2d9e959462e14a94de880c06f8e7dc732b80eb9c188c4354620d854306c17f012cfb7f43e37232a1f9a1fe41468165adffdff153eab948c90aaeca38e27b2498a1db636e9c313995688baf89645c30946c3ee1b42c1c1b33a14741c8b62a215e3af880e64d377b65b9e2d0604cb3ffb2db8190465d20501b09bbc3551ecb39d0e6ca96bb3dd55773c64f1ca9fcc03ac7d9a2350f087adfb18039cbee6cd4f39082d294ab836208cf2e068ca98f101b1478417ba22b44740", 0xf9}, {&(0x7f0000000e40)="eaa0532ef13a37b31a3ebd45161c622ada99c866911223ebe87fc4b429cbaff076ab17e65fa5840b4107f58d12c1ad389ab65cda3fa7328370b986fc788fe31c10e2b0db5f44275435d9c590a700cbb5c235987c2569d8fea82b3fb8add62c3ef54995141b532e66edad9abccef59bcf6563162ae6d3eaabed84bcf7f92f0437d26cb3121693a323ba9d9d413e920d4ae6a398e8377ef88517e1e4e09938", 0x9e}], 0x2, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xe0, 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000014c0)="3cbe196e74a459dc5c8f5087bd056fa7a4374ee79e67ba6ea76438c9243af79f4bbdb1d541a8", 0x26}, {&(0x7f0000001580)="335a9b743ab3976133309992f8c41e9778085e2a2f64d7471ab793ade19a9393abc0343376a188cbf8e4c642267e285ded851920558d09aba5d5249617712d8f9c0a9e1dd03e1b2eadbdfec3b2c0153580bf061124418cfb348210607c0e64d14ccef4b4c7740df073aa29dbec47a6636bc6a779c44639af038ed81fc2cd2bd701fbe64f25b71f4df22bd450b86555d376090b4d6e202cb9cb903065458b8b2744f2702f50f527960aa3181e5937", 0xae}, {&(0x7f0000001640)="39127bb33937ddd2ac0041a71adc544483e9529bf04680d398f835", 0x1b}], 0x3}}], 0x4, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r6) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:31:12 executing program 0: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101100, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000380)='\\\xd0(@\x00', &(0x7f0000000880)='./file0\x00', r0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000cc0)=@name, &(0x7f0000000d00)=0x10, 0xc00) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2611.848571][T12639] 9pnet: Insufficient options for proto=fd [ 2611.858408][T12625] RSP: 0018:ffffc900047c7d20 EFLAGS: 00010202 [ 2611.864408][T12625] RAX: 0000000000000002 RBX: ffff88814fbcfcf0 RCX: dffffc0000000000 [ 2611.872257][T12625] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 2611.885219][T12625] RBP: ffffc900047c7e10 R08: ffffffff81b6520b R09: ffffed1029f79fa4 17:31:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x48800, 0x0) r2 = open(&(0x7f0000001340)='./file1\x00', 0x143142, 0x0) (async, rerun: 64) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (rerun: 64) sendfile(r2, r3, 0x0, 0x1000000201005) (async) r4 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) (async, rerun: 64) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) (rerun: 64) sendfile(r4, r5, 0x0, 0x1000000201006) (async, rerun: 64) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file1\x00', 0x0, 0x8}, 0x18) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff26, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x2f, r1, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0xffffffff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[r2, 0x1, r4, 0x1, r6, 0x1, 0x1], &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0x5}, {0x0, 0x1, 0xb, 0x9}, {0x0, 0x4, 0x5, 0x4}, {0x0, 0x2, 0x10}, {0x2, 0x3, 0x10, 0x9}], 0x10, 0x2b3f}, 0x90) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async, rerun: 32) r9 = dup(r8) (rerun: 32) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000880)=ANY=[@ANYBLOB="a8"], 0xa8) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x182, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mark_victim\x00', r10}, 0x10) (async) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000400)={0xa0}, 0xa0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2d7766646e6f3dd879ad75c9cc9341a2f676d2e01d3b686cd45a772ca83a7eb5813b74ddd60cc9d4a7983017139cdf2b74d1e67263050314ba2fae25cccb782741629de5383c32de2a100da4795a990fba97f63e7553e238d18aba349f828eecfaa51a486c7594fa", @ANYRESHEX=r8, @ANYBLOB=',\x00']) 17:31:13 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000000000001040000000e0000f1850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000280)={0xd6064000, 0x0, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) [ 2611.893201][T12625] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000010 [ 2611.918229][T12625] R13: 1ffff920008f8fd1 R14: ffffc900047c7e88 R15: 1ffff920008f8fd0 [ 2611.934438][T12625] FS: 00007f023b34c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2611.949407][T12652] 9pnet: Insufficient options for proto=fd [ 2611.955245][T12625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2611.961895][T12625] CR2: 00000000200c0038 CR3: 000000015ef2e000 CR4: 00000000003506b0 [ 2611.975902][T12625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2612.001374][T12625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2612.018187][T12625] Kernel panic - not syncing: Fatal exception [ 2612.024220][T12625] Kernel Offset: disabled [ 2612.028349][T12625] Rebooting in 86400 seconds..