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"}) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001240)={0x0, 0x8, 0x7f, "eca4fb614aa27d61a0c755e41f3fbd1222d8e17b4322922049120ea1fefb6d1d17944779c81d78631a50ca7a1d17aa606ce434078e9e299887630cb221aa7d02c8b67e150642f1f9e8e89da721807ac19376dc134ac6e0af8847d39f7822394cbb93d847cd15ccd7f3a8776c6684fc1375b76a79cdc9cc60b0af0ec48a2215"}, 0x87) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) 08:38:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r7}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000140)={{r4}, r6, 0x14, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0x80, 0x5, {0x0, 0x0, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0x0]}}, @devid=r7}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000780)={r7, "97b7cb58c830aba12456e2aff461f351"}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 164.567150] encrypted_key: master key parameter '' is invalid 08:38:45 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x8000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=0x0, @ANYBLOB="241a1e0b00000000"], 0x20}}, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x2800, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x10c, 0x0, 0x330, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000011) 08:38:45 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:45 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r7}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000140)={{r4}, r6, 0x14, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0x80, 0x5, {0x0, 0x0, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0x0]}}, @devid=r7}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000780)={r7, "97b7cb58c830aba12456e2aff461f351"}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) [ 164.713840] 9pnet: Insufficient options for proto=fd [ 164.750109] md: could not open unknown-block(8,2). [ 164.778166] md: md_import_device returned -6 [ 164.803888] 9pnet: Insufficient options for proto=fd 08:38:46 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x8000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=0x0, @ANYBLOB="241a1e0b00000000"], 0x20}}, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x2800, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x10c, 0x0, 0x330, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000011) 08:38:46 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x8000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=0x0, @ANYBLOB="241a1e0b00000000"], 0x20}}, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x2800, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x10c, 0x0, 0x330, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000011) 08:38:46 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x8000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000"/20, @ANYRES32=0x0, @ANYBLOB="241a1e0b00000000"], 0x20}}, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x2800, 0x0) ioctl$BLKPG(r3, 0x40140921, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x10c, 0x0, 0x330, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20000011) 08:38:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0xee00) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000480)={r4, 0x0, "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", "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"}) 08:38:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="09000000362d727d7518c26c957ee55bedb793f7", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800130000000000"], 0x3c}}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) [ 165.340729] md: could not open unknown-block(8,2). [ 165.348443] md: md_import_device returned -6 [ 165.370141] audit: type=1400 audit(1599813526.487:16): avc: denied { create } for pid=9375 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 08:38:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001400310e0000000000000000ac1e0001000000000000000000000000fe88000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x8}, 0x0) [ 165.395748] audit: type=1400 audit(1599813526.487:17): avc: denied { ioctl } for pid=9375 comm="syz-executor.0" path="socket:[31560]" dev="sockfs" ino=31560 ioctlcmd=0x943e scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 08:38:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0xffffffff, 0x2d) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) getsockopt$inet_buf(r2, 0x0, 0x2a, &(0x7f0000000340)=""/231, &(0x7f0000000140)=0xe7) 08:38:46 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r7}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000140)={{r4}, r6, 0x14, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0x80, 0x5, {0x0, 0x0, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0x0]}}, @devid=r7}) r8 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x9}, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x801, 0x0, 0x0, 0x0, 0x4, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x240002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f00000003c0)) 08:38:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="bc45bd39", 0x4, 0x8, &(0x7f00000000c0)={0x23, 0x9, 0x1, 0x6}, 0x10) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f815) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000040), 0x81800) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) tkill(r2, 0xd) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x20080, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 165.464532] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 08:38:46 executing program 3: r0 = socket(0x0, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:46 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r6}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000140)={{r3}, r5, 0x14, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0x80, 0x5, {0x0, 0x0, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0x0]}}, @devid=r6}) r7 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}}) 08:38:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040)="3ebf10d00fafe3151e3e17790820218bd475a780be3e5f97ba23b1118502ae5d027d90a444c3d73b93", &(0x7f00000000c0)=@udp6=r1}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000000)=0xc) syz_mount_image$jfs(&(0x7f0000000840)='jfs\x00', &(0x7f0000000880)='./bus\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000001180)={[{@uid={'uid', 0x3d, r3}}]}) 08:38:46 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) pipe2(&(0x7f0000000180), 0x0) setuid(r3) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x9, 0xa, 0x20, 0x80, 0x16, 0x0, r3}, {0xba, 0x9, 0xcd, 0x1, 0x6, 0x6, 0xffffffff, 0x7}, {0x401, 0x9, 0x4, 0x5}, 0xfffffff7, 0x6e6bb7, 0x0, 0x0, 0x2, 0x2}, {{@in=@loopback, 0x4d4, 0x6c}, 0x2, @in=@empty, 0x3507, 0x3, 0x1, 0x3f, 0xfffffffa, 0x101, 0x89}}, 0xe8) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x3, 0x1, [0x1ff, 0xdb3, 0x8d, 0x7, 0x4, 0x1000, 0x10001, 0xfffff089]}) 08:38:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x1}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x6) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x990a]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 08:38:46 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xcc90, 0x0, 0x0, 0x0, 0xffffffff80000000, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) [ 165.871575] input: syz0 as /devices/virtual/input/input7 08:38:47 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x5d89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x107) prctl$PR_SET_FPEMU(0xa, 0x1) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x6) bind$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x8001) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x167, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0xffff, @empty}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000001000000000000000000100"}, 0xd8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4000014, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)="13caccb81987d8f0d022d935fc59f4bab6c0", 0x12}, {&(0x7f00000001c0)}], 0x2}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x1000001bd) 08:38:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x181800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="00000000000012000c0001000565746800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x54, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x24, 0x2, {{}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) setfsgid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r8 = socket(0x10, 0x80002, 0x0) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)=0x1) sendmmsg$alg(r8, &(0x7f0000000000), 0xb, 0x0) 08:38:47 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff00002a8f1c872d2b01000010", @ANYRES32=0x0, @ANYBLOB="ff7f000011000000140012800a00010076786c616e0000000400028008000a0036459cdb26"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x6800) [ 166.058504] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.102190] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 08:38:47 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r4}, @actul_num={@void, 0x7}}}) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:47 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) umount2(&(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4080, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0xffffff2f, 0x1, 0x80, 0x9, 0x6, "bdd0d81e29a7b87f3e96c166877d0843e4765e"}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) setreuid(0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) dup(0xffffffffffffffff) 08:38:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r7}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000140)={{r4}, r6, 0x14, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0x80, 0x5, {0x0, 0x0, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0x0]}}, @devid=r7}) r8 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:47 executing program 3: r0 = socket(0x0, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:47 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r3}, @actul_num={@void, 0x7}}}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 08:38:47 executing program 0: syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='./bus\x00', 0x9, 0x5, &(0x7f0000002580)=[{&(0x7f0000000400)="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", 0x1000, 0x4e3}, {&(0x7f0000001400)="ac31deefabb8fe3d13ad49a0759e79b565a8de1ca7a916dbf81cc034873e10a5db0f65846f9160588bf84b39185384d3ecfd921df391d4c1df7137590b4a2e8421644d3446ae882c44845da83f1268c374424e1bd724cb47f4455a55efb596aed0554ba4e53199669fecb355de706abd86c896a42341bc607b50bdb46815b262d99f830e3ac3b027d6d63cfcab53f620c70d2854", 0x94, 0x2}, {&(0x7f00000014c0)="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", 0x1000, 0x100}, {&(0x7f00000024c0)="92cb730e8234d9ff2513d92ffa57b456350e5e7c9b0c36b45703c8cad248f71d24ec3fa60c3ee0abd693b2083f4ae2e29f21fe3a8ccec363e9c51cd6fb76d429de83f03c46", 0x45, 0x4}, {&(0x7f0000002540)="082eb94eccc5", 0x6, 0xe6d}], 0x100000, &(0x7f0000002600)={[{@barrier='barrier'}, {@pquota='pquota'}, {@noquota='noquota'}, {@inode32='inode32'}], [{@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@euid_gt={'euid>', 0xee01}}, {@dont_hash='dont_hash'}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x40) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pread64(r3, &(0x7f0000000000)=""/102, 0x66, 0x100000000) getpeername$unix(r3, &(0x7f0000000180), &(0x7f0000000080)=0x6e) fallocate(0xffffffffffffffff, 0x100000001, 0x0, 0x28120001) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES32=r4, @ANYRESOCT=r0], 0xfd14) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0xd7c, 0xfffffffc, 0x0, 0x1, 0x0, 0x7f, 0x5, 0x20, 0x8, 0xfffffffe, 0x305, 0x1, 0xfffffff8, 0x3, 0x8, 0x29, {0x0, 0xb06a}, 0x1, 0x9}}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x8}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2000c155) fallocate(r2, 0x100000003, 0x0, 0x28120001) [ 166.665022] 9pnet: Insufficient options for proto=fd 08:38:47 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) pipe2(&(0x7f0000000180), 0x0) setuid(r3) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x9, 0xa, 0x20, 0x80, 0x16, 0x0, r3}, {0xba, 0x9, 0xcd, 0x1, 0x6, 0x6, 0xffffffff, 0x7}, {0x401, 0x9, 0x4, 0x5}, 0xfffffff7, 0x6e6bb7, 0x0, 0x0, 0x2, 0x2}, {{@in=@loopback, 0x4d4, 0x6c}, 0x2, @in=@empty, 0x3507, 0x3, 0x1, 0x3f, 0xfffffffa, 0x101, 0x89}}, 0xe8) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x3, 0x1, [0x1ff, 0xdb3, 0x8d, 0x7, 0x4, 0x1000, 0x10001, 0xfffff089]}) [ 166.760880] print_req_error: I/O error, dev loop0, sector 0 08:38:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x40000080000100, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$RTC_WIE_ON(r2, 0x700f) 08:38:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0xb4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x80, 0x5}) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000300)=@nl=@proc, 0x80, 0x0}, 0x40002023) 08:38:48 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) chdir(&(0x7f00000001c0)='./file0/file0\x00') write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004340)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x51, &(0x7f0000007380), 0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="4800000000000000816c066bb6a77f06dde133a8fac63016b69944fbc6b2c7a08551f768c6aeb004e99a70317fb463bed35045039a776c000000007f08384ffc3dfe6200bafb089e55383cd7c64b7b5a37d1aa5d1c218524b174043b5cd9df43995dd7a594dcb498a81e27f024855f6d5e31b442220c8f0461b13bcf04c82ce30c9c1760f39c4159e9411e936b579d434642d3e3af724d0b533c1f80368e846b02039ce65cd95fbf6ca833c6f7cba21cf4e92b40fdf55ef28510d4c241ee8918bf0fc738d1b7b8"], 0x48}}], 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xd8440, 0x0) read$sequencer(r3, &(0x7f0000000280)=""/246, 0xf6) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 08:38:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r7}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000140)={{r4}, r6, 0x14, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0x80, 0x5, {0x0, 0x0, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0x0]}}, @devid=r7}) r8 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r8}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:48 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r4}, @actul_num={@void, 0x7}}}) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:48 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r3}, @actul_num={@void, 0x7}}}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 08:38:48 executing program 3: r0 = socket(0x0, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 167.558864] print_req_error: I/O error, dev loop0, sector 0 08:38:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x101001) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000640)={&(0x7f0000000400)="3221f4283e433e22a7a6752c2485c3503290ed70a0a255cd30ef9db125b4c25805deae5bd71e3ce6933775ac125cfd81f9ee5e9cf991eeba22343b649f12d3429996366283b0c2c76ce356b137ff2c67061c0115fea6403b282b0f6c52109c758fd44371862e728b87dcc74f33c03f01ff66843bc62b3b5328cdd541e1475cdefa6579f01d23e0effb69404a6948d2a85fbaed89cf38f8050a636311558c98bd4a10403e135d13388ce767978b8324d23484a90d64aefbbcb582f623f9cc2d4aef626a69ad194f7438ee16df002c3884ca39c1a0", &(0x7f0000000500)=""/70, &(0x7f0000000580)="4dc71aa5c99f293265b5746695aca4086aa1bd8e06a1221b3fef688719552248c61a8c0651424f7f57fbfeaa45fa4713c772d11903c4e163ec0dc41c0cf689ae26ddde4a99e313bf69543c8486b0cf4d08ff6922d8cb18db2013af771413180354ac7ddbe0c2febd4955bee972ebece77ab82107ea08f106ada8af68e8da3b0f313e35c8e0b3fe1eaa016bd06392d10e3cd195b517201a9fe51e58ad34", &(0x7f00000002c0), 0x1}, 0x38) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000680)='\x00', 0x1, 0xfffffffffffffffc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x197002, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r2}, &(0x7f0000000180)=""/238, 0xee, &(0x7f0000000080)={&(0x7f0000000300)={'sha1-avx\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000040)={0x0, 0x0, r1}, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={'tgr160\x00'}, &(0x7f00000006c0)="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", 0x124}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x18, 0xfffd, 0x0, 0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000800)=0x7) [ 167.654086] vhci_hcd: invalid port number 253 [ 167.659003] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 167.672484] vhci_hcd: invalid port number 253 [ 167.677390] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 08:38:48 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000600)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000640)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r8 = fanotify_init(0x0, 0x101000) r9 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x54f6, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x7, 0x2, 0xb, 0x4, 0x16}, @generic={0x7, 0xf, 0x3, 0x4, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff8e}, @ldst={0x4, 0x2, 0x1, 0x9, 0xa, 0xffffffffffffffff, 0x4}, @generic={0x5, 0x1, 0x3, 0x0, 0xffffffff}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0xc9, &(0x7f00000007c0)=""/201, 0x40f00, 0xb, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0xb, 0x4, 0x8}, 0x10}, 0x78) r10 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000009c0), 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000340)="be4b0b6d2305dc4f01cb2842fdae4aa422bcb7053364cf64b10e24b75d8e48c0c56e95191961f801bc5b13fb46052efd1d5ee699d010c3716787fd3bc25da4bf903d1196b3ec04c76dce5a2c0014251a35d58d13ea9addbf8b0e3405eb42fc5797b068c94b6cbc3b27d279381bbbeef5b4b427d3635dd89b3ba6397ee923ca52be315942bc29f502f379bc6fe4ed5071a22705671e23f937fbbfa0bc119db1513792f092a6f8b78508b024132053c4ef0c774f0e692c86cd204cc98f0a9d72cdbf348aab9f8aa65c55f2ef1ff33318249c65318393eadde138f34ec669d10381a0ec8c7a6df56bb4456d0dede1c437", 0xef}, {&(0x7f0000000440)="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", 0xfc}], 0x2, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, r1, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r7}}}, @rights={{0x1c, 0x1, 0x1, [r8, r9, r10]}}], 0xd8, 0x30048090}, 0x200480c0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) umount2(&(0x7f0000000300)='./bus\x00', 0x0) [ 167.758619] overlayfs: unrecognized mount option "metacopy=on" or missing value 08:38:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x508981, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x10003ff, 0x0, 0x7, 0xe, "ba0997d543d670f9a5a5d62efbb16a900f69cf"}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4) eventfd2(0x80000000, 0x80001) [ 167.822399] overlayfs: unrecognized mount option "metacopy=on" or missing value 08:38:49 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x508981, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x10003ff, 0x0, 0x7, 0xe, "ba0997d543d670f9a5a5d62efbb16a900f69cf"}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4) eventfd2(0x80000000, 0x80001) 08:38:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x2, 0xfd13, &(0x7f0000000000)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2bd, 0x10, &(0x7f0000000000), 0xffffff8f}, 0x48) 08:38:49 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r4}, @actul_num={@void, 0x7}}}) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:49 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:49 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000000c0)={{}, {@val={r3}, @actul_num={@void, 0x7}}}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 08:38:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x508981, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x10003ff, 0x0, 0x7, 0xe, "ba0997d543d670f9a5a5d62efbb16a900f69cf"}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4) eventfd2(0x80000000, 0x80001) 08:38:49 executing program 3: r0 = socket(0x11, 0x0, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x508981, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x10003ff, 0x0, 0x7, 0xe, "ba0997d543d670f9a5a5d62efbb16a900f69cf"}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080), 0x4) eventfd2(0x80000000, 0x80001) [ 168.406931] 9pnet: Insufficient options for proto=fd [ 168.420995] 9pnet: Insufficient options for proto=fd 08:38:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='ipvlan1\x00') finit_module(r0, &(0x7f0000000080)='ipvlan1\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:38:49 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:50 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:50 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:50 executing program 3: r0 = socket(0x11, 0x0, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:50 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:50 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:50 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:50 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:51 executing program 3: r0 = socket(0x11, 0x0, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:51 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:51 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:51 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:51 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:52 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 171.380234] 9pnet: Insufficient options for proto=fd 08:38:52 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:52 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:52 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0xf6) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) tkill(r1, 0xb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80006) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) 08:38:53 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000800"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459c"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000002c0)=""/182) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x5b5504003fbb0100) fcntl$addseals(r0, 0x409, 0x5) sendto$ax25(r1, &(0x7f0000000100)="f181424fe16cac0cebb0c00f830870a15d1918a00e463b8f6d499565510372a1dc77ab4ef90bacafd0a0b045e033d016f960be85e22480cd50cdda3f08be8b4b7fa3ea516692a1c5ac84467641e25c71f330d328c8c83c8f4d12f855b3cc9f0f121e1daca6a073371920d2b52de4397016e249bfc070d65b4ead45557b7c4ea0da1a7f925310b80b16a744cba4745bbd3ee08ee3115a9e1925de3a413567873912eead5607cea39f5db1c865fe8d6f2f66522f7334f8b84ec42461ecd32a0ac407f61b4671aedb0fa97dd4b4d1543106d2aa396fb6a4d4702f10ded8538e1dd7f7570a", 0xe3, 0x8000, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 08:38:53 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:53 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 172.210235] 9pnet: Insufficient options for proto=fd 08:38:53 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:53 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 08:38:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 172.494749] 9pnet: Insufficient options for proto=fd 08:38:53 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:54 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 173.027194] 9pnet: Insufficient options for proto=fd 08:38:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:54 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 08:38:54 executing program 3: socket(0x11, 0x800000003, 0x8) bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 173.321781] 9pnet: Insufficient options for proto=fd 08:38:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80080004}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="30bd237a3581f8dde1150df003000002020500000000000000000007000005140001ff94ff80060003400004000006000340000000000600060073797a310050000000300001800c000280050001003a0000001400018008000100ac14141d080002000a230102050001000100000013000b006361f66c666f7277617264696e67a980f35e7979c58343e69b51b9295aa74ef93544f2f5d3"], 0x330}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000300)={0x6, 'vlan1\x00', {}, 0x9}) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 173.899448] audit: type=1326 audit(1599813535.017:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9893 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 08:38:55 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:38:55 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 08:38:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x2, 0x7, 0xffc0, 0x36, 0x8, 0x8, 0x2}, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x1c1f, 0x401) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0x7f, &(0x7f0000000140)=0x2) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(r4, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) r5 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000240)={0x0, [], 0x6}) 08:38:55 executing program 3: socket(0x11, 0x800000003, 0x8) bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 174.201563] 9pnet: Insufficient options for proto=fd [ 174.217880] 9pnet: Insufficient options for proto=fd 08:38:55 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:56 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:56 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:38:56 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 08:38:56 executing program 3: socket(0x11, 0x800000003, 0x8) bind(0xffffffffffffffff, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 175.064213] 9pnet: Insufficient options for proto=fd [ 175.090570] 9pnet: Insufficient options for proto=fd 08:38:56 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 175.275461] 9pnet: Insufficient options for proto=fd 08:38:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:56 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:38:56 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:56 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:56 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 175.914691] 9pnet: Insufficient options for proto=fd 08:38:57 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 176.102783] 9pnet: Insufficient options for proto=fd 08:38:57 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:57 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:57 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:57 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:57 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 176.833728] 9pnet: Insufficient options for proto=fd 08:38:58 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 176.974619] 9pnet: Insufficient options for proto=fd 08:38:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:58 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:58 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:58 executing program 1: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:38:58 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 177.625521] 9pnet: Insufficient options for proto=fd 08:38:58 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:38:59 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0000000000000015050021007a"], 0x28}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xc) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000100)=0x6) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x1, 0x0, "92b547d34bdf9cf3b1c746a03f81491f76210702405698491647045ca756bf57cf8692d7801cd64ccc035b5b94401a9fa0bed1752e9c1ed43588af2b6eda78f6078e68cf55448da478ed4e5d16d00b7a"}, 0xd8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x2d}, 0xc7, 0x2, 0xff, 0xf, 0x9, 0xfffb}, 0x20) 08:38:59 executing program 1: pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:38:59 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:38:59 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:38:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:39:00 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:00 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:00 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:00 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:00 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:39:01 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:01 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25050100000c00990005000000ffffffff08005482d737e5623ee8c4cfcd0fcb45329eb6f1e823c264ae65d2678a0ec317bcbb939a695334eeb8262c39db7cfb3a9ce0b03acaebae713169ac9fd50e3e85d7f2bffe577a8de0f9750385c8fdeca0ccf89f54c1e232c3574dfbc2f117cc70c88a5ce549b717462feda8ea605b5c180d250312073ba607589753d6ffcd61515c364ba61b891bec0069917662d85ecec52f5af63405a3688ac927451a500d10cb4d49a656e1ba2d4c5bb799778dd2aa4805f7131981222ed26241a0"], 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xaea, 0x9, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2f6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000000c0)=[{0x4, 0x5, 0x9, 0x260}, {0x2, 0x3f, 0x80, 0x80000000}, {0x4, 0x4, 0x20, 0x1}, {0x748, 0x7, 0x40, 0x2}]}) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000000200036150, 0x800007c, 0xffffffff, 0x0, 0x0, 0x4000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 179.981837] 9pnet: Insufficient options for proto=fd 08:39:01 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 180.078816] 9pnet: Insufficient options for proto=fd [ 180.168338] 9pnet: Insufficient options for proto=fd 08:39:01 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:01 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25050100000c00990005000000ffffffff08005482d737e5623ee8c4cfcd0fcb45329eb6f1e823c264ae65d2678a0ec317bcbb939a695334eeb8262c39db7cfb3a9ce0b03acaebae713169ac9fd50e3e85d7f2bffe577a8de0f9750385c8fdeca0ccf89f54c1e232c3574dfbc2f117cc70c88a5ce549b717462feda8ea605b5c180d250312073ba607589753d6ffcd61515c364ba61b891bec0069917662d85ecec52f5af63405a3688ac927451a500d10cb4d49a656e1ba2d4c5bb799778dd2aa4805f7131981222ed26241a0"], 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xaea, 0x9, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2f6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000000c0)=[{0x4, 0x5, 0x9, 0x260}, {0x2, 0x3f, 0x80, 0x80000000}, {0x4, 0x4, 0x20, 0x1}, {0x748, 0x7, 0x40, 0x2}]}) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000000200036150, 0x800007c, 0xffffffff, 0x0, 0x0, 0x4000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:39:01 executing program 1: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 180.303063] 9pnet: Insufficient options for proto=fd 08:39:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:39:01 executing program 1: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 180.357924] 9pnet: Insufficient options for proto=fd 08:39:01 executing program 1: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 180.417882] 9pnet: Insufficient options for proto=fd [ 180.581448] 9pnet: Insufficient options for proto=fd 08:39:01 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:01 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 180.753384] 9pnet: Insufficient options for proto=fd [ 180.819835] 9pnet: Insufficient options for proto=fd 08:39:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:02 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25050100000c00990005000000ffffffff08005482d737e5623ee8c4cfcd0fcb45329eb6f1e823c264ae65d2678a0ec317bcbb939a695334eeb8262c39db7cfb3a9ce0b03acaebae713169ac9fd50e3e85d7f2bffe577a8de0f9750385c8fdeca0ccf89f54c1e232c3574dfbc2f117cc70c88a5ce549b717462feda8ea605b5c180d250312073ba607589753d6ffcd61515c364ba61b891bec0069917662d85ecec52f5af63405a3688ac927451a500d10cb4d49a656e1ba2d4c5bb799778dd2aa4805f7131981222ed26241a0"], 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xaea, 0x9, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2f6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000000c0)=[{0x4, 0x5, 0x9, 0x260}, {0x2, 0x3f, 0x80, 0x80000000}, {0x4, 0x4, 0x20, 0x1}, {0x748, 0x7, 0x40, 0x2}]}) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000000200036150, 0x800007c, 0xffffffff, 0x0, 0x0, 0x4000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:39:02 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 180.915630] 9pnet: Insufficient options for proto=fd 08:39:02 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:02 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:02 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25050100000c00990005000000ffffffff08005482d737e5623ee8c4cfcd0fcb45329eb6f1e823c264ae65d2678a0ec317bcbb939a695334eeb8262c39db7cfb3a9ce0b03acaebae713169ac9fd50e3e85d7f2bffe577a8de0f9750385c8fdeca0ccf89f54c1e232c3574dfbc2f117cc70c88a5ce549b717462feda8ea605b5c180d250312073ba607589753d6ffcd61515c364ba61b891bec0069917662d85ecec52f5af63405a3688ac927451a500d10cb4d49a656e1ba2d4c5bb799778dd2aa4805f7131981222ed26241a0"], 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xaea, 0x9, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2f6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x4, &(0x7f00000000c0)=[{0x4, 0x5, 0x9, 0x260}, {0x2, 0x3f, 0x80, 0x80000000}, {0x4, 0x4, 0x20, 0x1}, {0x748, 0x7, 0x40, 0x2}]}) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000000200036150, 0x800007c, 0xffffffff, 0x0, 0x0, 0x4000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 08:39:02 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 181.172831] 9pnet: Insufficient options for proto=fd 08:39:02 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 181.210860] 9pnet: Insufficient options for proto=fd [ 181.219923] 9pnet: Insufficient options for proto=fd [ 181.225467] 9pnet: Insufficient options for proto=fd [ 181.286597] 9pnet: Insufficient options for proto=fd 08:39:02 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:02 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 08:39:02 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:39:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) [ 181.593735] 9pnet: Insufficient options for proto=fd [ 181.614403] 9pnet: Insufficient options for proto=fd [ 181.625870] 9pnet: Insufficient options for proto=fd [ 181.650049] 9pnet: Insufficient options for proto=fd 08:39:03 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:03 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:03 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 08:39:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:03 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 181.993888] 9pnet: Insufficient options for proto=fd [ 182.063896] 9pnet: Insufficient options for proto=fd 08:39:03 executing program 5: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:03 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 08:39:03 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:03 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:39:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 182.438659] 9pnet: Insufficient options for proto=fd 08:39:03 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:03 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:03 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 08:39:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:03 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 182.816063] 9pnet: Insufficient options for proto=fd [ 182.898985] 9pnet: Insufficient options for proto=fd 08:39:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:04 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:04 executing program 5: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x80}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000340)={0x0, 0x7, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9e0905, 0x2, [], @value=0xffffffff}}) 08:39:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:04 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 183.415046] Unknown ioctl 44672 08:39:04 executing program 4: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:04 executing program 1: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:39:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b80080003000200000008000100", @ANYRES32=r3, @ANYBLOB="1400030073797a5f747501000000000000000000"], 0x48}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x181200, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000240)) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x80000000}) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 08:39:04 executing program 1: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:39:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:04 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:04 executing program 1: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:39:05 executing program 5: pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:05 executing program 1: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 08:39:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 184.104958] 9pnet: Insufficient options for proto=fd 08:39:05 executing program 4: pipe(&(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:05 executing program 1: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 08:39:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x3, &(0x7f0000002400)=[{&(0x7f00000001c0)="0400050900000000666174000404090a020002740ef8", 0x16}, {0x0, 0xa0, 0xc5c}, {&(0x7f0000000040)="01", 0x1, 0x25}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffff, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @empty}}}, 0x84) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$UHID_DESTROY(r3, &(0x7f0000000000), 0x4) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) 08:39:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:05 executing program 1: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 184.553972] 9pnet: Insufficient options for proto=fd [ 184.564716] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:39:05 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 184.610543] 9pnet: Insufficient options for proto=fd [ 184.692024] FAT-fs (loop0): FAT read failed (blocknr 2569) 08:39:06 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:06 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 08:39:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 184.945303] 9pnet: Insufficient options for proto=fd 08:39:06 executing program 4: pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:06 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 08:39:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:06 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 08:39:06 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 185.334788] 9pnet: Insufficient options for proto=fd 08:39:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:06 executing program 1 (fault-call:3 fault-nth:0): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 185.374367] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 185.399123] 9pnet: Insufficient options for proto=fd [ 185.457851] FAULT_INJECTION: forcing a failure. [ 185.457851] name failslab, interval 1, probability 0, space 0, times 1 [ 185.470388] CPU: 1 PID: 10490 Comm: syz-executor.1 Not tainted 4.14.197-syzkaller #0 [ 185.478288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.487629] Call Trace: [ 185.490207] dump_stack+0x1b2/0x283 [ 185.493817] should_fail.cold+0x10a/0x154 [ 185.497948] should_failslab+0xd6/0x130 [ 185.501902] __kmalloc_track_caller+0x2bc/0x400 [ 185.506547] ? strndup_user+0x5b/0xf0 [ 185.510333] memdup_user+0x22/0xa0 [ 185.513850] strndup_user+0x5b/0xf0 [ 185.517455] ? copy_mnt_ns+0xa30/0xa30 [ 185.521320] SyS_mount+0x39/0x120 [ 185.524749] ? copy_mnt_ns+0xa30/0xa30 [ 185.528616] do_syscall_64+0x1d5/0x640 [ 185.532485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 185.537655] RIP: 0033:0x45d5b9 [ 185.540823] RSP: 002b:00007f62531fdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.548510] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 185.555759] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 185.563007] RBP: 00007f62531fdca0 R08: 0000000020000740 R09: 0000000000000000 [ 185.570256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.577505] R13: 00007ffede5f6f7f R14: 00007f62531fe9c0 R15: 000000000118cf4c 08:39:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:06 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:06 executing program 1 (fault-call:3 fault-nth:1): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 185.753021] 9pnet: Insufficient options for proto=fd [ 185.762649] FAULT_INJECTION: forcing a failure. [ 185.762649] name failslab, interval 1, probability 0, space 0, times 0 [ 185.780767] CPU: 1 PID: 10506 Comm: syz-executor.1 Not tainted 4.14.197-syzkaller #0 [ 185.788672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.798052] Call Trace: [ 185.800489] 9pnet: Insufficient options for proto=fd [ 185.800643] dump_stack+0x1b2/0x283 [ 185.809442] should_fail.cold+0x10a/0x154 [ 185.813598] should_failslab+0xd6/0x130 [ 185.817574] kmem_cache_alloc_trace+0x29a/0x3d0 [ 185.822243] ? copy_mnt_ns+0xa30/0xa30 [ 185.826132] copy_mount_options+0x59/0x2f0 [ 185.830367] ? copy_mnt_ns+0xa30/0xa30 [ 185.834259] SyS_mount+0x84/0x120 [ 185.837711] ? copy_mnt_ns+0xa30/0xa30 [ 185.841598] do_syscall_64+0x1d5/0x640 [ 185.845497] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 185.850685] RIP: 0033:0x45d5b9 [ 185.853868] RSP: 002b:00007f62531fdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.861573] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 185.868839] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 185.876106] RBP: 00007f62531fdca0 R08: 0000000020000740 R09: 0000000000000000 [ 185.883372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.890627] R13: 00007ffede5f6f7f R14: 00007f62531fe9c0 R15: 000000000118cf4c 08:39:07 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 186.184764] 9pnet: Insufficient options for proto=fd 08:39:07 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) bind(r0, &(0x7f0000000240)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001880)=@add_del={0x2, &(0x7f0000001840)='gre0\x00'}) getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), 0x4) 08:39:07 executing program 1 (fault-call:3 fault-nth:2): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:07 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 08:39:07 executing program 5: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:07 executing program 5: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 186.299940] 9pnet: Insufficient options for proto=fd [ 186.305857] audit: type=1326 audit(1599813547.418:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10539 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 08:39:07 executing program 5: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 186.348803] 9pnet: Insufficient options for proto=fd [ 186.358221] FAULT_INJECTION: forcing a failure. [ 186.358221] name failslab, interval 1, probability 0, space 0, times 0 [ 186.378578] CPU: 0 PID: 10546 Comm: syz-executor.1 Not tainted 4.14.197-syzkaller #0 [ 186.386476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.394873] 9pnet: Insufficient options for proto=fd [ 186.395823] Call Trace: [ 186.395841] dump_stack+0x1b2/0x283 [ 186.395858] should_fail.cold+0x10a/0x154 [ 186.395877] should_failslab+0xd6/0x130 [ 186.415250] kmem_cache_alloc+0x28e/0x3c0 [ 186.419401] getname_flags+0xc8/0x550 [ 186.423199] ? cache_alloc_refill+0x1da/0x350 [ 186.427694] user_path_at_empty+0x2a/0x50 [ 186.431842] do_mount+0x118/0x2a00 [ 186.435383] ? do_raw_spin_unlock+0x164/0x220 [ 186.439879] ? copy_mount_string+0x40/0x40 [ 186.444114] ? rcu_read_lock_sched_held+0x16c/0x1d0 08:39:07 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 186.449142] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 186.453984] ? copy_mnt_ns+0xa30/0xa30 [ 186.457877] ? copy_mount_options+0x1fa/0x2f0 [ 186.462369] ? copy_mnt_ns+0xa30/0xa30 [ 186.466255] SyS_mount+0xa8/0x120 [ 186.469967] ? copy_mnt_ns+0xa30/0xa30 [ 186.473856] do_syscall_64+0x1d5/0x640 [ 186.475363] 9pnet: Insufficient options for proto=fd [ 186.477752] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 186.477760] RIP: 0033:0x45d5b9 [ 186.477765] RSP: 002b:00007f62531fdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:39:07 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 186.477776] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 186.477781] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 186.477786] RBP: 00007f62531fdca0 R08: 0000000020000740 R09: 0000000000000000 [ 186.477791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.477795] R13: 00007ffede5f6f7f R14: 00007f62531fe9c0 R15: 000000000118cf4c 08:39:08 executing program 1 (fault-call:3 fault-nth:3): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 186.998543] FAULT_INJECTION: forcing a failure. [ 186.998543] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 187.006907] 9pnet: Insufficient options for proto=fd [ 187.010378] CPU: 1 PID: 10568 Comm: syz-executor.1 Not tainted 4.14.197-syzkaller #0 [ 187.010385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.010389] Call Trace: [ 187.010411] dump_stack+0x1b2/0x283 [ 187.038958] should_fail.cold+0x10a/0x154 [ 187.043113] __alloc_pages_nodemask+0x22c/0x2720 [ 187.047900] ? __lock_acquire+0x5fc/0x3f20 [ 187.052129] ? is_bpf_text_address+0xb8/0x150 [ 187.056217] 9pnet: Insufficient options for proto=fd [ 187.056613] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 187.066527] ? __kernel_text_address+0x9/0x30 [ 187.071020] ? trace_hardirqs_on+0x10/0x10 [ 187.075253] ? __save_stack_trace+0xa0/0x160 [ 187.079659] ? depot_save_stack+0x10d/0x3e3 [ 187.083970] ? kasan_kmalloc+0x139/0x160 [ 187.088029] ? kasan_kmalloc+0xeb/0x160 [ 187.092015] cache_grow_begin+0x8f/0x420 [ 187.096071] cache_alloc_refill+0x273/0x350 [ 187.100414] kmem_cache_alloc+0x333/0x3c0 [ 187.104545] getname_flags+0xc8/0x550 [ 187.108327] user_path_at_empty+0x2a/0x50 [ 187.112458] do_mount+0x118/0x2a00 [ 187.115982] ? copy_mount_string+0x40/0x40 [ 187.120242] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 187.125236] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 187.130057] ? copy_mnt_ns+0xa30/0xa30 [ 187.133947] ? copy_mount_options+0x1fa/0x2f0 [ 187.138421] ? copy_mnt_ns+0xa30/0xa30 [ 187.142288] SyS_mount+0xa8/0x120 [ 187.145721] ? copy_mnt_ns+0xa30/0xa30 [ 187.149620] do_syscall_64+0x1d5/0x640 [ 187.153553] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 187.158768] RIP: 0033:0x45d5b9 [ 187.161980] RSP: 002b:00007f62531fdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 187.169668] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 187.176935] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 187.184185] RBP: 00007f62531fdca0 R08: 0000000020000740 R09: 0000000000000000 [ 187.191449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 08:39:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:08 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 08:39:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) [ 187.198806] R13: 00007ffede5f6f7f R14: 00007f62531fe9c0 R15: 000000000118cf4c [ 187.227242] audit: type=1326 audit(1599813548.348:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10539 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 08:39:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 187.302753] 9pnet: Insufficient options for proto=fd [ 187.311129] 9pnet: Insufficient options for proto=fd 08:39:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 187.420430] 9pnet: Insufficient options for proto=fd [ 187.430782] 9pnet: Insufficient options for proto=fd 08:39:08 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7266648f6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:08 executing program 4: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:08 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:08 executing program 4: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 187.811277] 9pnet: Insufficient options for proto=fd [ 187.821344] 9pnet: Insufficient options for proto=fd [ 187.821717] 9pnet: Insufficient options for proto=fd 08:39:09 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 187.894256] 9pnet: Insufficient options for proto=fd [ 187.900596] 9pnet: Insufficient options for proto=fd 08:39:09 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x1048, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0xd990, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd9f, 0x400100) 08:39:09 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0xb, @sliced={0x3, [0x6, 0x7f, 0x8, 0xb19, 0x9e, 0x783, 0x7, 0x1, 0x5d68, 0x1ff, 0x2, 0x8, 0xad, 0x8000, 0x1, 0x81, 0x1, 0x200, 0xf468, 0x7f3, 0x80, 0x6, 0x4, 0x6, 0x9, 0xfff, 0x3, 0x3, 0x101, 0x4, 0x8, 0x6, 0xffff, 0x3, 0x7f, 0xb4, 0xc0, 0x1, 0xffff, 0xddb, 0x5, 0x4, 0x1, 0x40, 0xfff, 0x3f, 0x81, 0x1], 0x2}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) dup3(0xffffffffffffffff, r1, 0x0) 08:39:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:09 executing program 4: pipe(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:09 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:09 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 188.144823] 9pnet: Insufficient options for proto=fd 08:39:09 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:09 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 188.214924] 9pnet: Insufficient options for proto=fd 08:39:09 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 188.322506] 9pnet: Insufficient options for proto=fd 08:39:09 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x1048, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0xd990, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd9f, 0x400100) 08:39:10 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000001c0)={0x2, @empty, 0x4e23, 0x4, 'wrr\x00', 0x0, 0x5, 0x1c}, 0x2c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x7, 0x80800) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x4, 0x1}, {0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}], 0x40) accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@bcast, @bcast, @bcast, @default, @bcast, @rose, @remote, @bcast]}, &(0x7f0000000280)=0x48) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x1, 0x4, 0x0, 0x1}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c77668dc1cf646e6f3d2dda5daf37bbaad5f78f3e94d624e0bc494bf0a76d95963050eb17fbec33b6cd0be02d66e982baaa1288810dd83a189573636c04000000000000000c77ea15d700d608ae4e5300", @ANYRESHEX=r3, @ANYBLOB="2c736d61636b66737472616e736d7574653dc7747897a6248349877bb32c402d405b48002c736d61636b66737472616e736d7574653d2c00"]) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x3a9, 0x0, 0x1}) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000004c0)={{0x1, 0x2, 0x7fff, 0x9, 'syz0\x00', 0x10000}, 0x4, 0x10, 0x20, r4, 0x3, 0x3, 'syz1\x00', &(0x7f0000000480)=['\x00', '.\x00', '\x00'], 0x4, [], [0xaa7, 0x2, 0x101, 0x5]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RSETATTR(r5, &(0x7f00000002c0)={0x7, 0x1b, 0x1}, 0x7) 08:39:10 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:10 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000100)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:10 executing program 0: statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, &(0x7f0000000080)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001400)=@newtaction={0x44, 0x31, 0x101, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 08:39:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000100)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:10 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x20004051, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 08:39:10 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 189.035533] 9pnet: Insufficient options for proto=fd [ 189.043922] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003 [ 189.061949] 9pnet: Insufficient options for proto=fd 08:39:10 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 189.115451] 9pnet: Insufficient options for proto=fd 08:39:10 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 189.264422] 9pnet: Insufficient options for proto=fd 08:39:10 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='tp=\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:10 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000100)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:10 executing program 5: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:39:10 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x20004051, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 08:39:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 189.826915] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003 [ 189.834404] 9pnet: Insufficient options for proto=fd 08:39:11 executing program 5: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:39:11 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:11 executing program 5: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) [ 189.899770] 9pnet: Insufficient options for proto=fd 08:39:11 executing program 1: socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x1, "0c8dadcc97ccb005e24f84de70c66cfd2c9349fc6f349f69d70253422c88ea42", 0x1, 0x5, 0x80000001, 0x10000, 0x2}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7246b56e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 08:39:11 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 189.975445] 9pnet: Insufficient options for proto=fd 08:39:11 executing program 5: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 190.044360] 9pnet: Insufficient options for proto=fd 08:39:11 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0x101, 0x3, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x3, 0x1, 0xff, 0x0, 0x2, 0x45, "3e9f20f3"}, 0x6, 0x3, @userptr=0x8001}) [ 190.076625] 9pnet: Insufficient options for proto=fd 08:39:11 executing program 0: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, &(0x7f0000004500)=""/4100, 0x1004) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x64) setuid(r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b700000040420f00bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000005d040000000000002d400300000000006504000001ed00007b130000000000006c440000000000007a0a00fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61622cfd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d643ce4f0000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d0d0000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b1c99992cfcfd7160f3004e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c31c662198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe072171ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa841dbb"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 08:39:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:11 executing program 5: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 08:39:11 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x5, 0x20}}, 0x28) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 08:39:11 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:11 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 190.715650] 9pnet: Insufficient options for proto=fd 08:39:11 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpgid(0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x8, 0xc096}) r2 = getpgid(r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) pipe(&(0x7f0000000280)) sendfile(r4, r5, 0x0, 0xac08) 08:39:11 executing program 5: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 190.782590] 9pnet: Insufficient options for proto=fd [ 190.784571] 9pnet: Insufficient options for proto=fd 08:39:12 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:12 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 08:39:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x2a0841, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f0000001380)=""/226, 0xe2}], 0x2, 0x73, 0x6) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r4 = signalfd(r0, &(0x7f0000000140)={[0x544c]}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000340)={r5, 0x5598, 0x1000, "9d07408a37e8f324e19b42ff10cb70a89c211f28f662e96914a3a954c134361a9a233a94e92a69c7f914122c5e10b1fcdf9dcfd8a3394304ed767d879f2f666cf6fb994a3740b5360ae6c5675ec42392d466cfbb0b846cb660cb306e8e116f3aed57a79cbb76d30b298dc69e6e55e3dcea8537c663347fe802002e749079486b712fb2f036c8c002432043c543eaed7230c95c7c5f7373bee0af29ebc6051d29de6745a1b4689187b1d779514355c63fdbf32a8d0d77c4e26405bb7c6b8014dc4a79d8dd29d2c2263a4dc9ca9c213431e976ff5f6cae6f720765a0ef0d33d4b434c9e260be7fbe108a0e4a3c067af8d7c8d1e8cedf29f610046497d49a6bd0d659bc8d1cb090eeb1d3d5bb4ca3bfe1c7290ecdad88647b3c2150d0e168e8cec4ebc9a90a6afa74064ccd15bb377e57b11e0c2136d14d3939d2976afc8270cd5f726043e2def6459aef1eda50a1f839c44f40cc612f15101b501d857cc3553d5c4b04f3f07e9581fb5bddb2b750c0be43a0ae1a493420c2ea30c5715b5ceed1b9879377ff4eb04409273cf3bb545f05e2f84f73bca55e6cb42c5c79c9ecd26b0fb90c4244d3886e634b3e1993c059e23fe428f18a6cb73dbd472d16197237cc90f14721c973ff3117240096d83daa1dd277ff495ef129d4f121ac761f86d56be752d70d556d196af1c499a39d91b774fc2464d17b52f5b88ddbf67827d1268d420cf315d08c1ffc037b4c0c2917ae7ae2a14eb218137df3fc75bae4b71e2319341dab14cfd3ba46eb3bd77c979ea8e4e93496c1d887e2ea584b05bab3608b4e51126245706fa02c1bdd7bf2c6e480b5117dae02c743e2fd83898bbcb7e2e343d6cb90ca0449233af1b6921c964734fed97d6b2cea5367ff969e043274ec87db5966db4303739ee8bcff43f2cf6c0eebb156566b1b3891b4327fa4c393ebbacbfcdd9299abfc5b95769af2c4d88e0f643f7689c74ec9403fce2f7caca8a52f93d0968bc5ad0140c2674b0dcb856f5514b715280d85fef2e833185275275186168e0229f07f27b12b17116471b90a74489bb0ae546dc8e1d84aa1ed8469a3aee153636a0586e3e47c6a655448bc7c98666936368023485102600836c878aa2b8bc55b792bdbebd5a42d493f8480d8535403aa1c0a807e432c4e51dbc68acb725d19b217f6805745f374679541c12e59631723fa31249a65b0307f744f8c32b5560fcd0acab2573293d15945d76076c3aa6ce4993d5369c55f5c418774857e15f8e9a3277597e5c76d4b64b4c06af24438f96588121450add8ba53694075403a6e5d1199394a127e2ca3505af5658b247e1b3caaf3c9c10c76e594206e872ecb6cb0446a7946e44b3b9aabe234fd696372347eb0d4f9cec32bf32dbc692874410e9b4a8d285c3542fb106f0b0dc98657680fde75e595de936558748a2e5e8c758401a8f3f328f536452388ba8044c285eec57b55f4723d21a1c4987c6ebaf3492858b05700f423796826619e0e0622c7fe03c5a5d81d04bfc6c5dac05e0b56433aa6dab871789ae835f1e8f4795841406e827e8392497510d3ce6bdfbc13e7bc9c6f0b39cbbd4496682c7d8b9e673bac97f85d7f23de304a2e098c3efcf68390f8c818f969110eb0b19b34be1f132e63ff2d7f6400fc7acf20b9511f6720f641964b5caaf981b57cc8b536462f24f5f64bec0c13607d2c0f02b62e0c11d849cefa4aac07ae3cedfbfd2d78b0b6b6bb2ca5e91b7154ccade3e2da9ede56208444bcd910c1b34898b67f2a36208cd63760f264f2b6a961eee9747bb4339ef884525346a17820e1f1730a004a3862bc6df0b4fa8b6f42bc683405759f35622574565584504102f6b30089edd16402de1007013e81beddffe70bac8078d6c55f8c3856002db524ffcf30d7d8294c7968809edfeb552e253a5a7233d6de6c5e1c072293d2ec8409762df27a3822b39b39ac4e25d2a68b5c140f47f7706245034893c672f372895a0eb3d578784810bfd549d893a3e4227ae8553afe0377fa48ea858c7cb14576e557426d43874e93e096795958b9458ece93e765ad472a85d261d94c0619f6d6c6b7b0c0e15cfb066c879cf43bdfe3ea5a18024d583fb5ed3635ccb415481190093a941b2f468f5e484865bd3e216122d604f67070d3937695cd11a6be03fe2b00bbe01a8dc5d5aa982a1c036e8ff09442e1ee67589e20b8c09087d9a0f96405b62608a4ceb157d332cc89e78bd435253bd0b9def3b6a93b8d761f1ea34ccba91a1241e31b1c8c86a04cb6f5473476124b029235884b6257aa06dd04a087de48571b719f95bc915eb121a2f5e80f27e1f64798cfb613b5916e8f83d4a6d62aa780808d776e580f714b250f91ca37984ba65fce7a9a5239a61c1519847f6e5c569b14d08a2ce7f7f0538a2af40efa34d8bf5b67153bae670ba7c85215c863f2114c132a50912ad2c9ed0d0e7045639819b5f702dfc96d9bf7fdf01794bc53d84cfc68c8b3e88cfdd4006498cbe295ad118d8309b5d48066f77f3e8afb089acc5ba48b81be26a619c29a8ac35c92ca175fa92dcbe3d0bcd1e783e1f9174d1a979fd12fddeb95d14fd76e7bbc2cc3bc6ab9d26309eb7f6d8fadf4b71046c19c96e96ed38639082ad73611c4d611839502740a08fcb65ed0502b7f249e0a3ce8ad97f43c759c35d384c51418f792fe2bf72105bf50761435f1f4842677f87a38502ad7aa4721bc8877b76f7e968413289407a6678b3af8e72ed5d1d85e6592f7ecbc4a758fa553c49eb30f9cb4f86fd49c8290f58604610a54560d5aadbdc7fb7e3e4eed4de24e5e620244531677e76fef4f255b5a21c1f470d61280d48064b7ecf32868cc7a57127e5acc47c8ab38a076523451a3c7b65f8746be86f0147c270b9268d0f14d3c2314468df897e2b44e299aef8bf12e06502cec2474d6ca7688a1dd1659eeac3fcbc23e6e20d534f73004f1b8d37c362b4abe850c3b30d274d44c73f3667f38310eccd7f659754f6723be6cee6443f70d9ca06c03226a941482c10330ea23897b347be9569b270d992c7def78e3a4ce3b568b44569bf2988b6230ad470d641f276b0924c00d0e03cdaf5e8bfa91883ad865c4042e8e9d3ad0ded1af19e84ba657856dce2188cda69a090a37bfddaa18f1b61c49b9eda054804e1cf49d02951cc0f2690577af4f95ccefdd7585e6bc04f603f0d091c828bd4d11176fcfb3d2c97ad066bcfc21129eb8fc029353f6e367cd91b89a70e6cb471994f7116705dccfaeae50dad0e97aff0fb100caedd0e52dfca42ebc0edf0e6045a75f75ae19db8359d91919f932e51b2d0fa256d41938b819dac3c02e86b59288cf7d005a818765c2291ebfe9a406136722e6daf7fc1c54b997064b1580547de9347e62f86f226a9d275e3bf6c77ffc5f2be16b30fbcdf4454d1bfeca4fb3742731cc4e1e56ce39a08a2dfac013c8b554f61c021151f8e38cb719fedcd153cf9f6399cc5f80cb9164af9cd6c904a021cfd353dcb7159eaa77a7b1ecf3c0920a8e47a0ff73347ae0eb757b3061b07f9f80786f21b3ed78a952b1e7ed2cefa8c9cd1d19b51fcc08788d6dbb5f4e284c3be5e219bdd75bedcbb0a9a537945a87a596a4b94d08e39b362b6c44c83624df3a1cb6168707ee093dda02045d357da742fb8ef04eb73bb3338c5ea6730f2457f6d034f784d0093b9c77c9af2b9aceb349d31a02cabfa19490ca97359007f732ed32fe22b252fd493ec44a6fdd45dab9833a72b44faae84a5977cede9344ad6309cc12ce6deee99e29baca1383afcd91f6850009f8c41ea70dbf088b8a1ea084aaa52c2285229a8cfa845e0f3a35f0e53d8aa1690f69918a2af2598e10575120bbf25ed08730a377d82d051b9ff93499b4a391d683c7db9e1adef29007881bcd2c360c3619e21803b53677b9d2cc53480b02b126b72f170ca0155cd6a7fa3af275792ca91346a807e0de5172e9eeec621d1ab69132a5230145501d78c7bf620022afa0dc782ab3fb8ced48b5fdb5d7795f8938aab3899c0bca3043087b0d85127431d8047535733faa377c2f383b38e2a508e7a4c638a3d2b56ddd86ab4dad6c6b46d6ad56c0a20861218332a576d23f4b812a108ab72ecdf8ed15253fc6c0dac9353b3da220901646fda68aec73530da8b12c887d86ca6df802d4e30db695e9bf052756de11fdd7c1e883c8ba11d3320c7a222c7c06a9ff4f23a31df9de3c034c5f707b600c85e644c2f8a5a491accf09ef70c0c9f6530d15ff8c4112677930f8e084fc077e95cfe467faf15b563c90f55d035a5570b151a33f647279e594099c011eb4380828fb99572f5ab2784d0a92d812f80894113a6c8f7a273cee8e0d32f06d93484844cd79ec010a6b88516c8f6a4fa050ada494e701697917ad3477fad8f95a5ea102465d7b1830356bb54fe0914b8d24423deccc17f3dc7e618873c78721a47c21256f825e13151a06d5520310ff23b6395cd934cd664b69ca550d5b0297b21778c16ca7fbf1725abc6e02d5572589f5ddd3c4a2a4a31a9a11ca49dddda8b15886c166e4c1b2007edb69debdd908f2157fa58ea1591d13cfb143c1650b9dd57f7a4fe7c49a928063d498bf3ebf14c0264956de5d12a18bea51f4b69b1cbeddafb2957cc7df130ff0e0f86fb6f9ea7cc12626a28fecf38410fcdbe635217f887cf0fcabd6024f9ea769cad1943d6b2e1dca9253edf3e53fb1049809fcf0a99929ab0cea6871ab1a20708843b1c4c7f15a24e75fab6b7d099386557da39ba1698268b159cb5ebb3b456af64079abffb08976aea25bb952bf2b705d2ac80c3a5fd4cc491eca1e8addcb6ac3a68e7e18534a9f236bbfa0d6dbd47d07f801a3ec784e6935e9c77c8263004144b59794ac4b3cb3838b9dea036d7fe0cfe234ae5b9abf691d7dfc1fd3dc56d2f36f52c4826fe9fc5877d4c2475d4e2b48d52494865eb3b88807b0248bc38aa2f08f428f1b278cae4747d4d9bfd14723ae61f479fdb6e0b6609cdb049c8dfe3d5f9d68c8a53b64791f8d7f9cc320c685cab874de4fc88ebffde78b12b4ad95e42fe861584efc8f25f04cce7920487de46d173105b9cc3aa3b0d616e5988ad05ed3a2f86cb172907db822eaf5b2be8199a1812435c1ce6feff3cbc7a55dd95fcf164adba7f6f6d933b955992fd13420da749241986037b8b27148fa8a130438797aef03da0542f3e607b6ae4445c7cb5978f697fb12619c8f6c9d58c1aa426326e9976251433c26f3fe1dea30f59a1134b83f8d90ee0bed3ef9e107b51b39d8352faf737f3c7fddfd55e995effb513ddf46bbf67369fe910f6bdad5e7d86264237d4be524b83c981092bcd4166ff48edfaf4c91da4233a04e1bef42c64c1a8eb52684b91903f294b47a03417f1e369fc8873d7a1179fec126e0044f319d41fb306487917cd16548344d9e40a826845fd8a594f3ff2dcd77df0db4e660fa831d16a3abd745c5df1691820ee8b77183dcc5156fbfb64a602525fa8002fd05a39e7a08577a0eb282f5969282b7bb2a6dd53bb64c6b5a3072e6d6de9057e8ce789eebab09d0acc67d014b055e3be0cac508d18276dfad742fee00d070275a5f6637539d29ba5eec6c8583ef1809d5ca3ec8b9a48d3303bac6a4d74cc97ca66b3b05087431eb8d4077819ce1559b597546a9365ff7bcaede104c261c1f0820ccc7bc0185d43a0fc7b49eb57a2b7aacc2addf6b1b7fefd29d06a6cdf95939577a7035d39546e03e267ee723dab8d94634cbfa5e985a3315b4c35cb1327622155c75099338d902fd81"}, 0x1008) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',\x00']) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000001480)={'syz1', "ce2ebe1a546ae60790117d7c608cef4dde0a61fe34032f9e67f134a3e61e53323ca1550a070655ec89d2a5575bec0c39ed2ad66608f99025cfc3f73b95e10161ff63d378946022d298e1b40a2bf2c9044866495b07840797045e6bc1631a4532290b71aa68dcea5c093d3ebbc6e884eaafd7ae9584158123ad0919258a49a2c1ec1a4223d728edb39b3d65aba69387e38d0a82438c6911ec9c262a67a5"}, 0xa1) [ 190.969694] 9pnet: Insufficient options for proto=fd 08:39:12 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:12 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:39:12 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 08:39:12 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:39:12 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 191.538245] 9pnet: Insufficient options for proto=fd [ 191.581312] 9pnet: Insufficient options for proto=fd 08:39:12 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:12 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) [ 191.603382] 9pnet: Insufficient options for proto=fd 08:39:12 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpgid(0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000000)={0x8, 0xc096}) r2 = getpgid(r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/fib_trie\x00') connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) pipe(&(0x7f0000000280)) sendfile(r4, r5, 0x0, 0xac08) 08:39:12 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 08:39:12 executing program 5 (fault-call:3 fault-nth:0): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:12 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 191.710415] FAULT_INJECTION: forcing a failure. [ 191.710415] name failslab, interval 1, probability 0, space 0, times 0 [ 191.725944] 9pnet: Insufficient options for proto=fd [ 191.761965] CPU: 0 PID: 10849 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 191.763291] 9pnet: Insufficient options for proto=fd [ 191.769917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.769922] Call Trace: [ 191.769941] dump_stack+0x1b2/0x283 [ 191.769958] should_fail.cold+0x10a/0x154 [ 191.769974] should_failslab+0xd6/0x130 [ 191.769983] __kmalloc_track_caller+0x2bc/0x400 [ 191.769992] ? strndup_user+0x5b/0xf0 [ 191.770003] memdup_user+0x22/0xa0 [ 191.770013] strndup_user+0x5b/0xf0 [ 191.770022] ? copy_mnt_ns+0xa30/0xa30 [ 191.770032] SyS_mount+0x39/0x120 [ 191.770043] ? copy_mnt_ns+0xa30/0xa30 [ 191.825501] do_syscall_64+0x1d5/0x640 [ 191.829400] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 191.834586] RIP: 0033:0x45d5b9 [ 191.837769] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 191.845475] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 191.852745] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 08:39:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000040), 0x80) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77cb1ffe9fbc", @ANYRESHEX=r2, @ANYBLOB=',\x00']) pause() ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) [ 191.860013] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 191.867282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.874549] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 191.971025] 9pnet: Insufficient options for proto=fd 08:39:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:13 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 08:39:13 executing program 5 (fault-call:3 fault-nth:1): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 192.357404] FAULT_INJECTION: forcing a failure. [ 192.357404] name failslab, interval 1, probability 0, space 0, times 0 [ 192.369962] CPU: 1 PID: 10869 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 192.377864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.387219] Call Trace: [ 192.389803] dump_stack+0x1b2/0x283 [ 192.390269] 9pnet: Insufficient options for proto=fd [ 192.393430] should_fail.cold+0x10a/0x154 [ 192.393444] should_failslab+0xd6/0x130 [ 192.393456] kmem_cache_alloc_trace+0x29a/0x3d0 [ 192.411297] ? copy_mnt_ns+0xa30/0xa30 [ 192.415187] copy_mount_options+0x59/0x2f0 [ 192.419415] ? copy_mnt_ns+0xa30/0xa30 [ 192.423286] SyS_mount+0x84/0x120 [ 192.426989] ? copy_mnt_ns+0xa30/0xa30 [ 192.430902] do_syscall_64+0x1d5/0x640 [ 192.434770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 192.439939] RIP: 0033:0x45d5b9 [ 192.443105] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.450796] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 08:39:13 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 08:39:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 192.458057] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 192.465314] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 192.472570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.479822] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:13 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:13 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 192.519428] 9pnet: Insufficient options for proto=fd [ 192.536817] 9pnet: Insufficient options for proto=fd 08:39:13 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 08:39:13 executing program 5 (fault-call:3 fault-nth:2): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 192.588617] 9pnet: Insufficient options for proto=fd [ 192.597386] 9pnet: Insufficient options for proto=fd 08:39:13 executing program 4 (fault-call:3 fault-nth:0): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 192.653304] 9pnet: Insufficient options for proto=fd [ 192.662578] FAULT_INJECTION: forcing a failure. [ 192.662578] name failslab, interval 1, probability 0, space 0, times 0 [ 192.685552] CPU: 0 PID: 10892 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 192.693484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.702844] Call Trace: [ 192.705113] FAULT_INJECTION: forcing a failure. [ 192.705113] name failslab, interval 1, probability 0, space 0, times 0 [ 192.705432] dump_stack+0x1b2/0x283 [ 192.720226] should_fail.cold+0x10a/0x154 [ 192.724364] should_failslab+0xd6/0x130 [ 192.728330] kmem_cache_alloc+0x28e/0x3c0 [ 192.732465] getname_flags+0xc8/0x550 [ 192.736253] user_path_at_empty+0x2a/0x50 [ 192.740391] do_mount+0x118/0x2a00 [ 192.743916] ? copy_mount_string+0x40/0x40 [ 192.748134] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 192.753136] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 192.757961] ? copy_mnt_ns+0xa30/0xa30 [ 192.761831] ? copy_mount_options+0x1fa/0x2f0 [ 192.766306] ? copy_mnt_ns+0xa30/0xa30 [ 192.770176] SyS_mount+0xa8/0x120 [ 192.773607] ? copy_mnt_ns+0xa30/0xa30 [ 192.777478] do_syscall_64+0x1d5/0x640 [ 192.781351] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 192.786530] RIP: 0033:0x45d5b9 [ 192.789704] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.797401] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 192.804745] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 192.812004] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 192.819282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.826537] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 192.833802] CPU: 1 PID: 10895 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 192.839377] 9pnet: Insufficient options for proto=fd [ 192.841679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.841683] Call Trace: [ 192.841700] dump_stack+0x1b2/0x283 [ 192.841716] should_fail.cold+0x10a/0x154 [ 192.841731] should_failslab+0xd6/0x130 [ 192.870444] __kmalloc_track_caller+0x2bc/0x400 [ 192.875117] ? strndup_user+0x5b/0xf0 [ 192.878923] memdup_user+0x22/0xa0 [ 192.882461] strndup_user+0x5b/0xf0 [ 192.886086] ? copy_mnt_ns+0xa30/0xa30 [ 192.889971] SyS_mount+0x39/0x120 [ 192.893423] ? copy_mnt_ns+0xa30/0xa30 [ 192.897316] do_syscall_64+0x1d5/0x640 08:39:14 executing program 5 (fault-call:3 fault-nth:3): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 192.901203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 192.906387] RIP: 0033:0x45d5b9 [ 192.909573] RSP: 002b:00007f6a6a51ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.917277] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 192.919488] FAULT_INJECTION: forcing a failure. [ 192.919488] name failslab, interval 1, probability 0, space 0, times 0 [ 192.924541] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 192.924547] RBP: 00007f6a6a51aca0 R08: 0000000020000740 R09: 0000000000000000 08:39:14 executing program 1: pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 192.924551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.924557] R13: 00007ffc8dff3d5f R14: 00007f6a6a51b9c0 R15: 000000000118cf4c [ 192.968724] CPU: 0 PID: 10901 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 192.976620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.985970] Call Trace: [ 192.988563] dump_stack+0x1b2/0x283 [ 192.992200] should_fail.cold+0x10a/0x154 [ 192.996356] should_failslab+0xd6/0x130 [ 193.000341] kmem_cache_alloc+0x28e/0x3c0 [ 193.004488] getname_flags+0xc8/0x550 [ 193.008287] ? cache_alloc_refill+0x2fa/0x350 [ 193.012771] user_path_at_empty+0x2a/0x50 [ 193.016898] do_mount+0x118/0x2a00 [ 193.020427] ? do_raw_spin_unlock+0x164/0x220 [ 193.024927] ? copy_mount_string+0x40/0x40 [ 193.029241] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 193.034248] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 193.039140] ? copy_mnt_ns+0xa30/0xa30 [ 193.043060] ? copy_mount_options+0x1fa/0x2f0 [ 193.047536] ? copy_mnt_ns+0xa30/0xa30 [ 193.051419] SyS_mount+0xa8/0x120 [ 193.054884] ? copy_mnt_ns+0xa30/0xa30 [ 193.058768] do_syscall_64+0x1d5/0x640 [ 193.062641] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.067810] RIP: 0033:0x45d5b9 [ 193.071041] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.078728] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 193.085977] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 193.093225] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 08:39:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:14 executing program 4 (fault-call:3 fault-nth:1): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:14 executing program 5 (fault-call:3 fault-nth:4): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 193.100530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 193.107779] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 193.186288] FAULT_INJECTION: forcing a failure. [ 193.186288] name failslab, interval 1, probability 0, space 0, times 0 [ 193.189061] FAULT_INJECTION: forcing a failure. [ 193.189061] name failslab, interval 1, probability 0, space 0, times 0 [ 193.201380] CPU: 0 PID: 10915 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 193.216626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.225981] Call Trace: [ 193.228562] dump_stack+0x1b2/0x283 [ 193.232180] should_fail.cold+0x10a/0x154 [ 193.236314] should_failslab+0xd6/0x130 [ 193.240273] kmem_cache_alloc+0x28e/0x3c0 [ 193.244405] alloc_vfsmnt+0x23/0x7f0 [ 193.248105] ? _raw_read_unlock+0x29/0x40 [ 193.252234] vfs_kern_mount.part.0+0x27/0x470 [ 193.256717] do_mount+0xe53/0x2a00 [ 193.260248] ? copy_mount_string+0x40/0x40 [ 193.264465] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 193.269459] ? copy_mnt_ns+0xa30/0xa30 [ 193.273326] ? copy_mount_options+0x1fa/0x2f0 [ 193.277824] ? copy_mnt_ns+0xa30/0xa30 [ 193.281701] SyS_mount+0xa8/0x120 [ 193.285140] ? copy_mnt_ns+0xa30/0xa30 [ 193.289018] do_syscall_64+0x1d5/0x640 [ 193.292909] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.298087] RIP: 0033:0x45d5b9 [ 193.301257] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.309815] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 193.317097] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 193.324355] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 193.331616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 193.338887] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 193.346159] CPU: 1 PID: 10913 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 193.354048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.363407] Call Trace: [ 193.365999] dump_stack+0x1b2/0x283 [ 193.369628] should_fail.cold+0x10a/0x154 [ 193.373786] should_failslab+0xd6/0x130 [ 193.377767] kmem_cache_alloc_trace+0x29a/0x3d0 [ 193.382433] ? copy_mnt_ns+0xa30/0xa30 [ 193.386317] copy_mount_options+0x59/0x2f0 [ 193.390555] ? copy_mnt_ns+0xa30/0xa30 [ 193.394442] SyS_mount+0x84/0x120 [ 193.397891] ? copy_mnt_ns+0xa30/0xa30 [ 193.401779] do_syscall_64+0x1d5/0x640 [ 193.405671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.410857] RIP: 0033:0x45d5b9 [ 193.414041] RSP: 002b:00007f6a6a51ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.421747] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 193.429015] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 08:39:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) semop(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 08:39:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:14 executing program 5 (fault-call:3 fault-nth:5): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 193.436282] RBP: 00007f6a6a51aca0 R08: 0000000020000740 R09: 0000000000000000 [ 193.443550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.450907] R13: 00007ffc8dff3d5f R14: 00007f6a6a51b9c0 R15: 000000000118cf4c [ 193.451941] 9pnet: Insufficient options for proto=fd [ 193.529063] FAULT_INJECTION: forcing a failure. [ 193.529063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.586856] CPU: 0 PID: 10925 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 193.594772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.604133] Call Trace: [ 193.606728] dump_stack+0x1b2/0x283 [ 193.610364] should_fail.cold+0x10a/0x154 [ 193.614519] __alloc_pages_nodemask+0x22c/0x2720 [ 193.619280] ? trace_hardirqs_on+0x10/0x10 [ 193.623513] ? _find_next_bit+0xdb/0x100 [ 193.627577] ? pcpu_alloc+0xbe0/0xf50 [ 193.631388] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 193.636242] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 193.641694] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 193.646711] alloc_pages_current+0x155/0x260 [ 193.651122] ? __lockdep_init_map+0x100/0x560 [ 193.655617] get_zeroed_page+0x19/0x50 [ 193.659504] mount_fs+0x1c7/0x2a0 [ 193.662958] vfs_kern_mount.part.0+0x5b/0x470 [ 193.667452] do_mount+0xe53/0x2a00 [ 193.671001] ? copy_mount_string+0x40/0x40 [ 193.675238] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 193.680253] ? copy_mnt_ns+0xa30/0xa30 08:39:14 executing program 4 (fault-call:3 fault-nth:2): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 193.684139] ? copy_mount_options+0x1fa/0x2f0 [ 193.688629] ? copy_mnt_ns+0xa30/0xa30 [ 193.692512] SyS_mount+0xa8/0x120 [ 193.695965] ? copy_mnt_ns+0xa30/0xa30 [ 193.699865] do_syscall_64+0x1d5/0x640 [ 193.703758] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.708942] RIP: 0033:0x45d5b9 [ 193.712128] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.719832] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 193.723199] FAULT_INJECTION: forcing a failure. [ 193.723199] name failslab, interval 1, probability 0, space 0, times 0 [ 193.727096] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 193.727102] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 193.727113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 193.727120] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 193.784282] CPU: 1 PID: 10933 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 193.792193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.801546] Call Trace: [ 193.804142] dump_stack+0x1b2/0x283 [ 193.807774] should_fail.cold+0x10a/0x154 [ 193.811931] should_failslab+0xd6/0x130 [ 193.815904] kmem_cache_alloc+0x28e/0x3c0 [ 193.820054] getname_flags+0xc8/0x550 [ 193.823857] user_path_at_empty+0x2a/0x50 [ 193.828006] do_mount+0x118/0x2a00 [ 193.831558] ? copy_mount_string+0x40/0x40 [ 193.835806] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 193.840810] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 193.845659] ? copy_mnt_ns+0xa30/0xa30 [ 193.849549] ? copy_mount_options+0x1fa/0x2f0 [ 193.854023] ? copy_mnt_ns+0xa30/0xa30 [ 193.857893] SyS_mount+0xa8/0x120 [ 193.861325] ? copy_mnt_ns+0xa30/0xa30 [ 193.865192] do_syscall_64+0x1d5/0x640 [ 193.869151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.874319] RIP: 0033:0x45d5b9 [ 193.877487] RSP: 002b:00007f6a6a51ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:39:14 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81d36bb3019c13bd2321af3cf1a54f26fb0b71d0e6adfefcf1d8f7faf75e0f226bd917487960717142fa9ea4318123751c0a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ceb9fbfbf9b0a4def23d410f6296b32a83438810720a159cda903634e369a9e152ddca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd963218cef40068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa0000000000000000000000000000000000000000ddffffff020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf900003323aa9fdfb52faf9cb09c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f03000000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899fc0159e800ea2474b540500a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec309baed0495f06d058a73651d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d971f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad380a447483cac394c7bbdcd0e3b1c39b6e0c410ade7a36b2635d60916de48a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73755539280b064bdaba71f897144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06dddeb61799257ab5a9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230ad1e1f4933545fc3c741374211663f6b5972ea3b77641467c89fa0f82e8440105051e5510a33dcda5e143fbf221fff161c12ca389cbe4c51b3fa00675cc175067d2a214f8c9d9b2ecf63016c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931ba3552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2af79b8d4c2bf0f7a2cb032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf7f9fe0bc9f2a1a7506d35e5eb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c010000000000000048a9dea00000b91d2309dc7ae49e4d5f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca165cbbbaa2935f602327484386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67aedc6af1b6b2b218e8213fec2b4fda19789fd163838d7d49c3fa9595a314e7c028e61c48de2316cdb01b2a4114fae0ca859d79fd7cc9c3e2c9ce644f724faa2dbdfcb7c66549a25de665fd3edf8a3aaee6b8de0cebdba4af865fc05043b67410356bdf9885b3a1b93fcb5265642f7fc4e07c5cb30b49100a3ff13873711f2910b5e9eae3dd58f12fd4d2ee922f620c1f50e81a1e6705cb63e04aa313acef6e3abb5f24e0ccaa26a4f8678084122ef8d84185b9d891117b771048bf3478fd2cb656d8438d91bd97a6b62ee6fad5f2e7cd4718166db1917733f418b28a71ef4cc81bba2168a5512f066be647f35083"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0x117, 0xd, &(0x7f0000000ac0)}) sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)}, 0x2c040) 08:39:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:15 executing program 5 (fault-call:3 fault-nth:6): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 193.885173] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 193.892421] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 193.899670] RBP: 00007f6a6a51aca0 R08: 0000000020000740 R09: 0000000000000000 [ 193.906917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.914164] R13: 00007ffc8dff3d5f R14: 00007f6a6a51b9c0 R15: 000000000118cf4c 08:39:15 executing program 4 (fault-call:3 fault-nth:3): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 193.992678] FAULT_INJECTION: forcing a failure. [ 193.992678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.012516] CPU: 1 PID: 10947 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 194.020447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.029805] Call Trace: [ 194.032398] dump_stack+0x1b2/0x283 [ 194.036035] should_fail.cold+0x10a/0x154 [ 194.040188] __alloc_pages_nodemask+0x22c/0x2720 [ 194.044953] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 194.050412] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 194.055544] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 194.057271] FAULT_INJECTION: forcing a failure. [ 194.057271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.060561] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 194.077163] ? _find_next_bit+0xdb/0x100 [ 194.081208] ? pcpu_alloc+0xbe0/0xf50 [ 194.084994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 194.089843] alloc_pages_current+0x155/0x260 [ 194.094237] get_zeroed_page+0x19/0x50 [ 194.098107] selinux_sb_copy_data+0x28/0x3b0 [ 194.102502] security_sb_copy_data+0x6e/0xa0 [ 194.106897] mount_fs+0x1e7/0x2a0 [ 194.110348] vfs_kern_mount.part.0+0x5b/0x470 [ 194.114825] do_mount+0xe53/0x2a00 [ 194.118349] ? copy_mount_string+0x40/0x40 [ 194.122653] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 194.127663] ? copy_mnt_ns+0xa30/0xa30 [ 194.131530] ? copy_mount_options+0x1fa/0x2f0 [ 194.136002] ? copy_mnt_ns+0xa30/0xa30 [ 194.139867] SyS_mount+0xa8/0x120 [ 194.143575] ? copy_mnt_ns+0xa30/0xa30 [ 194.147443] do_syscall_64+0x1d5/0x640 [ 194.151312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.156481] RIP: 0033:0x45d5b9 [ 194.159648] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.167359] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 194.174607] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 194.181993] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 194.189242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 194.196493] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 194.203773] CPU: 0 PID: 10953 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 194.211653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.221002] Call Trace: [ 194.223609] dump_stack+0x1b2/0x283 [ 194.227267] should_fail.cold+0x10a/0x154 [ 194.231452] __alloc_pages_nodemask+0x22c/0x2720 [ 194.236225] ? __lock_acquire+0x5fc/0x3f20 [ 194.240458] ? is_bpf_text_address+0xb8/0x150 [ 194.244957] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 194.249799] ? __kernel_text_address+0x9/0x30 [ 194.254288] ? trace_hardirqs_on+0x10/0x10 [ 194.258513] ? __save_stack_trace+0xa0/0x160 [ 194.262914] ? depot_save_stack+0x10d/0x3e3 [ 194.267221] ? kasan_kmalloc+0x139/0x160 [ 194.271266] ? kasan_kmalloc+0xeb/0x160 [ 194.275239] cache_grow_begin+0x8f/0x420 [ 194.279292] cache_alloc_refill+0x273/0x350 [ 194.283607] kmem_cache_alloc+0x333/0x3c0 [ 194.287744] getname_flags+0xc8/0x550 [ 194.291531] user_path_at_empty+0x2a/0x50 [ 194.295697] do_mount+0x118/0x2a00 [ 194.299225] ? copy_mount_string+0x40/0x40 [ 194.303443] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 194.308445] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 194.313268] ? copy_mnt_ns+0xa30/0xa30 [ 194.317140] ? copy_mount_options+0x1fa/0x2f0 [ 194.321615] ? copy_mnt_ns+0xa30/0xa30 [ 194.325484] SyS_mount+0xa8/0x120 [ 194.328921] ? copy_mnt_ns+0xa30/0xa30 [ 194.332874] do_syscall_64+0x1d5/0x640 [ 194.336830] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.342084] RIP: 0033:0x45d5b9 [ 194.345313] RSP: 002b:00007f6a6a51ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.353141] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 194.360488] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 194.367798] RBP: 00007f6a6a51aca0 R08: 0000000020000740 R09: 0000000000000000 [ 194.375078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 194.382331] R13: 00007ffc8dff3d5f R14: 00007f6a6a51b9c0 R15: 000000000118cf4c 08:39:15 executing program 1: pipe(&(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x2000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:15 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:15 executing program 5 (fault-call:3 fault-nth:7): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x4, 0xfffffffc) recvmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010020, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_FPEXC(0xb, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x800) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(0x0, 0x363) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000001280)='net/fib_trie\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x40008d4) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) [ 194.479516] FAULT_INJECTION: forcing a failure. [ 194.479516] name failslab, interval 1, probability 0, space 0, times 0 [ 194.491003] CPU: 0 PID: 10962 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 194.498893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.508248] Call Trace: [ 194.510854] dump_stack+0x1b2/0x283 [ 194.514581] should_fail.cold+0x10a/0x154 [ 194.518736] should_failslab+0xd6/0x130 [ 194.522715] kmem_cache_alloc_trace+0x29a/0x3d0 [ 194.527440] v9fs_mount+0x54/0x860 [ 194.530993] mount_fs+0x92/0x2a0 [ 194.534362] vfs_kern_mount.part.0+0x5b/0x470 [ 194.538859] do_mount+0xe53/0x2a00 [ 194.542406] ? copy_mount_string+0x40/0x40 [ 194.546649] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 194.551665] ? copy_mnt_ns+0xa30/0xa30 [ 194.555552] ? copy_mount_options+0x1fa/0x2f0 [ 194.560046] ? copy_mnt_ns+0xa30/0xa30 [ 194.563953] SyS_mount+0xa8/0x120 [ 194.567410] ? copy_mnt_ns+0xa30/0xa30 [ 194.571304] do_syscall_64+0x1d5/0x640 [ 194.575195] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.580382] RIP: 0033:0x45d5b9 [ 194.583566] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.591273] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 194.598537] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 194.605803] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 194.613068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 194.620324] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:15 executing program 5 (fault-call:3 fault-nth:8): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:15 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x77d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x353da74b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x43}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x44b84471}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 194.675248] FAULT_INJECTION: forcing a failure. [ 194.675248] name failslab, interval 1, probability 0, space 0, times 0 [ 194.687043] CPU: 0 PID: 10980 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 194.694924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.704273] Call Trace: [ 194.706864] dump_stack+0x1b2/0x283 [ 194.710501] should_fail.cold+0x10a/0x154 [ 194.714649] should_failslab+0xd6/0x130 [ 194.718627] __kmalloc_track_caller+0x2bc/0x400 [ 194.723302] ? v9fs_session_init+0x98/0x1540 [ 194.727709] ? trace_hardirqs_on+0x10/0x10 [ 194.731943] kstrdup+0x36/0x70 [ 194.735136] v9fs_session_init+0x98/0x1540 [ 194.739371] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 194.744129] ? v9fs_show_options+0x6b0/0x6b0 [ 194.748544] ? v9fs_mount+0x54/0x860 [ 194.752255] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 194.757706] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 194.762720] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 194.767565] v9fs_mount+0x73/0x860 [ 194.771102] mount_fs+0x92/0x2a0 [ 194.774454] vfs_kern_mount.part.0+0x5b/0x470 [ 194.778935] do_mount+0xe53/0x2a00 [ 194.782462] ? copy_mount_string+0x40/0x40 [ 194.786684] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 194.791680] ? copy_mnt_ns+0xa30/0xa30 [ 194.795546] ? copy_mount_options+0x1fa/0x2f0 [ 194.800019] ? copy_mnt_ns+0xa30/0xa30 [ 194.803886] SyS_mount+0xa8/0x120 [ 194.807317] ? copy_mnt_ns+0xa30/0xa30 [ 194.811188] do_syscall_64+0x1d5/0x640 [ 194.815146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.820315] RIP: 0033:0x45d5b9 08:39:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) name_to_handle_at(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x79, 0x4, "2e63b9008bbeed1113850e0b6417afc30d2bcd58d68aa4dbf4cfaf9f29d33ece0af477edbbd546acca8759d3282c5666db0d62fa9364cf3cfa8b49319a0e94fdd2e3d68406337cc6150ec7550bd9e8f12e5f09f292892a3d8d3c2ef051402db123af755fdbb0ca8d400439a4309d11ebeb"}, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x292) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x18102, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x38b903, 0x0) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f00000002c0)=0x7) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r8, &(0x7f0000004500)=""/4100, 0x1004) ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0xc004ae02, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}) [ 194.823486] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.831173] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 194.838422] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 194.845673] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 194.852921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 194.860186] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:16 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="050000006e6f3d", @ANYRESHEX=r1, @ANYBLOB="2cfa8165c6c8b17b96c7027444fa53f6b2ae1f81eb55d0ae1485aa9ff3f5b03558f278967b3599e7d5e8878932d116b428b035ef8f767fd80165f5cac625bff2ec06a2482d27f8c393e47703358d8b51e939b28b4d1421abcad08b80d44f8d4130f6de00c5bb371d6b0f9061e1b5f17566118842ca8ec794dd6e795b720d870d18f3c80880b5b923f104a1706c4aaa28c331c9f0b10434cc701924ccc085710ef46e1cb3bdac5012f223a2b6687fd935c5e9c3a1500223e46444b446844f09d160a0c38e23a7bd2ae2b5445581"]) [ 194.886234] 9pnet: Insufficient options for proto=fd 08:39:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x8009, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 194.920223] 9pnet: Insufficient options for proto=fd 08:39:16 executing program 5 (fault-call:3 fault-nth:9): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 194.992719] FAULT_INJECTION: forcing a failure. [ 194.992719] name failslab, interval 1, probability 0, space 0, times 0 [ 195.033874] CPU: 1 PID: 11005 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 195.041911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.051266] Call Trace: [ 195.053863] dump_stack+0x1b2/0x283 [ 195.057501] should_fail.cold+0x10a/0x154 [ 195.061657] should_failslab+0xd6/0x130 [ 195.065635] __kmalloc_track_caller+0x2bc/0x400 [ 195.070304] ? v9fs_session_init+0xd1/0x1540 [ 195.074714] kstrdup+0x36/0x70 [ 195.077909] v9fs_session_init+0xd1/0x1540 08:39:16 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='t=\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 195.082154] ? v9fs_show_options+0x6b0/0x6b0 [ 195.086565] ? v9fs_mount+0x54/0x860 [ 195.090277] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 195.095730] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.100748] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 195.105596] v9fs_mount+0x73/0x860 [ 195.109149] mount_fs+0x92/0x2a0 [ 195.112574] vfs_kern_mount.part.0+0x5b/0x470 [ 195.117052] do_mount+0xe53/0x2a00 [ 195.120585] ? copy_mount_string+0x40/0x40 [ 195.124800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.129794] ? copy_mnt_ns+0xa30/0xa30 [ 195.133660] ? copy_mount_options+0x1fa/0x2f0 [ 195.138141] ? copy_mnt_ns+0xa30/0xa30 [ 195.142016] SyS_mount+0xa8/0x120 [ 195.145447] ? copy_mnt_ns+0xa30/0xa30 [ 195.149324] do_syscall_64+0x1d5/0x640 [ 195.153293] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.158462] RIP: 0033:0x45d5b9 [ 195.161744] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.169560] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 195.176814] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 195.184078] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 195.191330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 195.198583] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(0x0, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = accept4$nfc_llcp(r2, 0x0, &(0x7f00000002c0), 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x800) r8 = accept4$ax25(r1, &(0x7f00000006c0)={{0x3, @default}, [@netrom, @remote, @remote, @default, @default, @rose, @rose, @rose]}, &(0x7f0000000780)=0x48, 0x80000) r9 = openat$userio(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/userio\x00', 0x0, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="080300002a0000012dbd7000ffdbdf253f319361a6bfa1ed4c9489c1005c07677167894c5f2411414e5d09f3114fe5bb5b8ac9aa74b852b6096bfcca18db280d67a3ddbbd57a213555f460bb2ffa0c887feaf8abc610412ea79f7e46d650c0ef858be879a0655d405480611cb6d0df107472775cc6099a5c9b2dbc4c333b2897795f7bfe5e65f908002200", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x308}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000102000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r2, @ANYRES32=r10, @ANYRES32=r11], 0x138, 0x20000000}, 0x1) r12 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r12}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 08:39:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:16 executing program 5 (fault-call:3 fault-nth:10): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 195.310475] FAULT_INJECTION: forcing a failure. [ 195.310475] name failslab, interval 1, probability 0, space 0, times 0 [ 195.322016] CPU: 1 PID: 11026 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 195.329906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.339262] Call Trace: [ 195.341858] dump_stack+0x1b2/0x283 [ 195.345490] should_fail.cold+0x10a/0x154 [ 195.349644] should_failslab+0xd6/0x130 [ 195.353619] kmem_cache_alloc_trace+0x29a/0x3d0 [ 195.358292] p9_client_create+0x9c/0x12c0 [ 195.362432] ? fs_reclaim_release+0xd0/0x110 [ 195.366842] ? p9_client_flush+0x4c0/0x4c0 [ 195.371066] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 195.376497] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.381493] ? __lockdep_init_map+0x100/0x560 [ 195.385973] ? __raw_spin_lock_init+0x28/0x100 [ 195.390555] v9fs_session_init+0x1c5/0x1540 [ 195.394870] ? v9fs_show_options+0x6b0/0x6b0 [ 195.399266] ? v9fs_mount+0x54/0x860 [ 195.402959] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 195.408401] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.413411] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 195.418242] v9fs_mount+0x73/0x860 [ 195.421832] mount_fs+0x92/0x2a0 [ 195.425180] vfs_kern_mount.part.0+0x5b/0x470 [ 195.429667] do_mount+0xe53/0x2a00 [ 195.433210] ? copy_mount_string+0x40/0x40 [ 195.437446] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.442457] ? copy_mnt_ns+0xa30/0xa30 [ 195.446350] ? copy_mount_options+0x1fa/0x2f0 [ 195.450832] ? copy_mnt_ns+0xa30/0xa30 [ 195.454700] SyS_mount+0xa8/0x120 [ 195.458144] ? copy_mnt_ns+0xa30/0xa30 [ 195.462029] do_syscall_64+0x1d5/0x640 [ 195.465910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.471089] RIP: 0033:0x45d5b9 [ 195.474277] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.482111] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 195.489361] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 195.496613] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 195.503877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a 08:39:16 executing program 5 (fault-call:3 fault-nth:11): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 195.511142] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 195.527617] 9pnet: Insufficient options for proto=fd [ 195.575794] FAULT_INJECTION: forcing a failure. [ 195.575794] name failslab, interval 1, probability 0, space 0, times 0 [ 195.587431] CPU: 1 PID: 11037 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 195.595316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.604672] Call Trace: [ 195.607267] dump_stack+0x1b2/0x283 [ 195.610940] should_fail.cold+0x10a/0x154 [ 195.615095] should_failslab+0xd6/0x130 [ 195.619070] kmem_cache_alloc_trace+0x29a/0x3d0 [ 195.623739] p9_idpool_create+0x3c/0x120 [ 195.627801] p9_client_create+0x1d4/0x12c0 [ 195.632032] ? fs_reclaim_release+0xd0/0x110 [ 195.636446] ? p9_client_flush+0x4c0/0x4c0 [ 195.640678] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 195.646231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.651239] ? __lockdep_init_map+0x100/0x560 [ 195.655721] ? __raw_spin_lock_init+0x28/0x100 [ 195.660293] v9fs_session_init+0x1c5/0x1540 [ 195.664599] ? v9fs_show_options+0x6b0/0x6b0 [ 195.668998] ? v9fs_mount+0x54/0x860 [ 195.672726] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 195.678189] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.683238] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 195.688064] v9fs_mount+0x73/0x860 [ 195.691601] mount_fs+0x92/0x2a0 [ 195.694958] vfs_kern_mount.part.0+0x5b/0x470 [ 195.699451] do_mount+0xe53/0x2a00 [ 195.702982] ? copy_mount_string+0x40/0x40 [ 195.707246] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 195.712241] ? copy_mnt_ns+0xa30/0xa30 [ 195.716117] ? copy_mount_options+0x1fa/0x2f0 [ 195.720602] ? copy_mnt_ns+0xa30/0xa30 [ 195.724469] SyS_mount+0xa8/0x120 [ 195.727899] ? copy_mnt_ns+0xa30/0xa30 [ 195.731794] do_syscall_64+0x1d5/0x640 [ 195.735672] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.740847] RIP: 0033:0x45d5b9 [ 195.744034] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.751739] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 195.758990] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 195.766241] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 08:39:16 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) [ 195.773516] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 195.780764] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:16 executing program 5 (fault-call:3 fault-nth:12): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000690000006900000022000000000000000400000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000b0000000000000000000000080000000000000000010000b5010000000000000000000000000000007d0000000000"], 0x0, 0x86}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = accept4$rose(r3, &(0x7f0000000200)=@full={0xb, @remote, @remote, 0x0, [@rose, @rose, @null, @netrom, @rose, @default]}, &(0x7f0000000240)=0x40, 0x800) sendto(r4, &(0x7f0000000280)="034cdbe67aeda553bbf6734b1e13c7806b345a79318d311f", 0x18, 0x10, &(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x4}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x89dfc9f74922bff2}, 0xc040) 08:39:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 195.893218] FAULT_INJECTION: forcing a failure. [ 195.893218] name failslab, interval 1, probability 0, space 0, times 0 [ 195.915856] warning: process `syz-executor.0' used the obsolete bdflush system call [ 195.923677] Fix your initscripts? [ 195.940974] CPU: 0 PID: 11054 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 195.948895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.958261] Call Trace: [ 195.960869] dump_stack+0x1b2/0x283 [ 195.964507] should_fail.cold+0x10a/0x154 [ 195.968754] should_failslab+0xd6/0x130 [ 195.972733] __kmalloc+0x2c1/0x400 [ 195.976274] ? match_strdup+0x58/0xa0 [ 195.980079] match_strdup+0x58/0xa0 [ 195.983717] p9_client_create+0x3ba/0x12c0 [ 195.987957] ? p9_client_flush+0x4c0/0x4c0 [ 195.992196] ? __lockdep_init_map+0x100/0x560 [ 195.996687] ? __raw_spin_lock_init+0x28/0x100 [ 196.001257] v9fs_session_init+0x1c5/0x1540 [ 196.005568] ? v9fs_show_options+0x6b0/0x6b0 [ 196.009965] ? v9fs_mount+0x54/0x860 [ 196.014792] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 196.020239] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 196.025253] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 196.030079] v9fs_mount+0x73/0x860 [ 196.033635] mount_fs+0x92/0x2a0 [ 196.036983] vfs_kern_mount.part.0+0x5b/0x470 [ 196.041474] do_mount+0xe53/0x2a00 [ 196.045011] ? copy_mount_string+0x40/0x40 [ 196.049256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 196.054262] ? copy_mnt_ns+0xa30/0xa30 [ 196.058135] ? copy_mount_options+0x1fa/0x2f0 [ 196.062628] ? copy_mnt_ns+0xa30/0xa30 [ 196.066498] SyS_mount+0xa8/0x120 [ 196.069932] ? copy_mnt_ns+0xa30/0xa30 [ 196.073817] do_syscall_64+0x1d5/0x640 [ 196.077690] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.082857] RIP: 0033:0x45d5b9 [ 196.086030] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:39:17 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:17 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc001) pipe(&(0x7f00000000c0)) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f00000007c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/rt6_stats\x00') r3 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c002f07cc6d38fcb73a25c399200e1e5a2576359e41b73a3c6e73368bcda2f7a08a4fa875414300b08ebac9f64c9fb60b47f3fdd6b968c7755ebb4d"]) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000780)=0x4, 0x4) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x0, 0x1, 0x1f, 0xd, 0x1b1, &(0x7f0000000340)="2dac8e141e1c891109007343427adfdcd66ea64317dfb6070f717c24cd5f7b2e751965bc068e76b8a49d0183f35d260681de05096e11bcdd5375bb25ac138b885a6d787a656fc14868958b924658c5a950c74e725114f8f5edf9d0fa9e3ac874251297de2d913d455beccdf02859f728e1fc8e28cc5bb68863c730a897f7298b0301a07f2d1668b5d993052b17842739af7fb8271673c4ccfcc2febe1b41099b82ba3591a874ada376533f6ef0c07b43adfbb4c66c62f15ddd6744b2664a8b67d88e3589f99ed8a9a8f90e950ba6cc313beb5cca1ec46cbc823db2be0d14f7a75054ff99e15aa4a5d838b56ed95e0686b453dbd224e21c047d0755a0e6b570084be17b9fc026a05b9b3bb852c61b16974c1c0682ca205722be1cac0c4b262ebfc37b6e1fe852ba378ec6e678ff90ec3c0ca378a3d54331e75eb35d7a4ca80f76e1a4c1a454ec889595b9f3b855edc5ea85cb4e2eabd29fb4b46f7153b56e42176d0e065e87f1cca17120b5c7a1b3cb2967df8c8756121bd721438c9041e3be35ad439e927cd8d4863ae354526fd3099a71f610aee7295af4dafd3f34dbc7c969d6dcfd5a0be533759b1465dae0e30c9355921cfc57ae66ebe05ca576deec989722c47f29c0aae9e738795c51ccb9557a4ae276b11cf435dbfbbf7883726075f34619581d9992935b0c496c1c5933276bcd1ba7e6a22bfec3a67f1943f5e6302d90f026b3d9059d96edab22fb84c82d366029a4d0ca00ff569fc6d712475419f5825388cefbcf54634f42e43ad229d6bb5400611acf3e7450be5989c0745e9bc97004643a1604237565e69811566c43e27b0b9d9556d4d7c0d2e2efab94598ef29613df6d4b34e3a9b427b2b4ce954b198514511e3d3ef8db13ee4583271ce14042cc9b9315cdcabf7423c77fed68ea3f13b24c0da439b528fcf6080066fa5b6408e971751da972c38a6590868ca0701a31244e4f6f03db206e6b0e0415a95832a6ec70498e94f4c1d8ad4ccdcfd5157994b1ec4b8477324cae6821f449f645587beb62a3c885a90f6e00ea8f079a992573fe406f915d5e8f1d0b07885d62cea92503ac4f5b4fce7516e6ee0a04712add2945b79216cb637bfe315d89460f3005c495b39d6fa2a9a750ad5be3b9138554e0de1ea792688cd6a10200f24ec9d02610539a427473e44d8874c8621e7ae5501d4cd6881c3308a17cbb877fc6c7758fc3f6ab5ebbf62f72fb8b35b6c7abf0da0f9d96aa8ea356a1c56034fedafd540e94f4333a70f87686a2fa6644131458eee3bb6f70d646b42872d19d1428fddecbe4d557a1f92cce4ae1f0ae5eed2be4e03057181c47bd5d2632fbb945f5cfb8de283782d6403ba54d402433b0b7e0d2bf113273c75ca96b1605643e8db18e0bc2bd3244692459fd6d3003bb91c75390b64e8c9a49cd2379830cae35c657d10370"}) pread64(r3, &(0x7f0000000000)=""/34, 0x22, 0x7) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000100)=0x1) [ 196.093715] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 196.100964] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 196.108299] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 196.115557] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 196.122820] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:17 executing program 5 (fault-call:3 fault-nth:13): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 196.211627] FAULT_INJECTION: forcing a failure. [ 196.211627] name failslab, interval 1, probability 0, space 0, times 0 [ 196.231954] CPU: 0 PID: 11074 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 196.239864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.249220] Call Trace: [ 196.251821] dump_stack+0x1b2/0x283 [ 196.255461] should_fail.cold+0x10a/0x154 [ 196.259618] should_failslab+0xd6/0x130 [ 196.263593] __kmalloc+0x2c1/0x400 [ 196.267134] ? match_strdup+0x58/0xa0 [ 196.270935] match_strdup+0x58/0xa0 [ 196.274570] p9_client_create+0x3ba/0x12c0 [ 196.278810] ? p9_client_flush+0x4c0/0x4c0 [ 196.283049] ? __lockdep_init_map+0x100/0x560 [ 196.287548] ? __raw_spin_lock_init+0x28/0x100 [ 196.292149] v9fs_session_init+0x1c5/0x1540 [ 196.296476] ? v9fs_show_options+0x6b0/0x6b0 [ 196.300879] ? v9fs_mount+0x54/0x860 [ 196.304582] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 196.310028] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 196.315028] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 196.319873] v9fs_mount+0x73/0x860 [ 196.323397] mount_fs+0x92/0x2a0 [ 196.326742] vfs_kern_mount.part.0+0x5b/0x470 [ 196.331223] do_mount+0xe53/0x2a00 [ 196.334752] ? retint_kernel+0x2d/0x2d [ 196.338618] ? copy_mount_string+0x40/0x40 [ 196.342832] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 196.347657] ? copy_mount_options+0x1fa/0x2f0 [ 196.352138] ? copy_mnt_ns+0xa30/0xa30 [ 196.356006] SyS_mount+0xa8/0x120 [ 196.359434] ? copy_mnt_ns+0xa30/0xa30 [ 196.363303] do_syscall_64+0x1d5/0x640 [ 196.367285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.372484] RIP: 0033:0x45d5b9 [ 196.375655] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.383341] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 196.390589] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 196.397840] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 196.405086] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d 08:39:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:17 executing program 5 (fault-call:3 fault-nth:14): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 196.412334] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 196.476377] FAULT_INJECTION: forcing a failure. [ 196.476377] name failslab, interval 1, probability 0, space 0, times 0 [ 196.504032] CPU: 0 PID: 11090 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 196.511950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.521305] Call Trace: [ 196.523898] dump_stack+0x1b2/0x283 [ 196.527540] should_fail.cold+0x10a/0x154 [ 196.531703] should_failslab+0xd6/0x130 [ 196.535680] kmem_cache_alloc_trace+0x29a/0x3d0 [ 196.540449] p9_idpool_create+0x3c/0x120 [ 196.544500] p9_client_create+0x57a/0x12c0 [ 196.548726] ? p9_client_flush+0x4c0/0x4c0 [ 196.552948] ? __lockdep_init_map+0x100/0x560 [ 196.557423] ? __raw_spin_lock_init+0x28/0x100 [ 196.561997] v9fs_session_init+0x1c5/0x1540 [ 196.566318] ? v9fs_show_options+0x6b0/0x6b0 [ 196.570716] ? v9fs_mount+0x54/0x860 [ 196.574410] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 196.579844] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 196.584841] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 196.589667] v9fs_mount+0x73/0x860 [ 196.593190] mount_fs+0x92/0x2a0 [ 196.596537] vfs_kern_mount.part.0+0x5b/0x470 [ 196.601011] do_mount+0xe53/0x2a00 [ 196.604535] ? copy_mount_string+0x40/0x40 [ 196.608749] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 196.613743] ? copy_mnt_ns+0xa30/0xa30 [ 196.617610] ? copy_mount_options+0x1fa/0x2f0 [ 196.622087] ? copy_mnt_ns+0xa30/0xa30 [ 196.625955] SyS_mount+0xa8/0x120 [ 196.629384] ? copy_mnt_ns+0xa30/0xa30 [ 196.633251] do_syscall_64+0x1d5/0x640 [ 196.637125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.642292] RIP: 0033:0x45d5b9 [ 196.645461] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.653146] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 196.660396] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 196.667643] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 08:39:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200800, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000240)={0x8029, 0x1}) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x81) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:17 executing program 5 (fault-call:3 fault-nth:15): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 196.674892] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 196.682139] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:17 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 196.742121] FAULT_INJECTION: forcing a failure. [ 196.742121] name failslab, interval 1, probability 0, space 0, times 0 [ 196.762325] CPU: 0 PID: 11102 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 196.770232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.779586] Call Trace: [ 196.782445] dump_stack+0x1b2/0x283 [ 196.786080] should_fail.cold+0x10a/0x154 [ 196.790232] should_failslab+0xd6/0x130 [ 196.794211] __kmalloc_track_caller+0x2bc/0x400 [ 196.798877] ? parse_opts.part.0+0x76/0x2d0 [ 196.803200] kstrdup+0x36/0x70 [ 196.806394] parse_opts.part.0+0x76/0x2d0 [ 196.810541] ? p9_fd_show_options+0x190/0x190 [ 196.815038] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 196.820136] ? fs_reclaim_release+0xd0/0x110 [ 196.824530] p9_fd_create+0x86/0x3b0 [ 196.828227] ? p9_fd_create_tcp+0x440/0x440 [ 196.832531] ? __raw_spin_lock_init+0x28/0x100 [ 196.837096] p9_client_create+0x5fd/0x12c0 [ 196.841312] ? p9_client_flush+0x4c0/0x4c0 [ 196.845555] ? __lockdep_init_map+0x100/0x560 [ 196.850038] ? __raw_spin_lock_init+0x28/0x100 [ 196.854598] v9fs_session_init+0x1c5/0x1540 [ 196.858918] ? v9fs_show_options+0x6b0/0x6b0 [ 196.859366] 9pnet: Insufficient options for proto=fd [ 196.863322] ? v9fs_mount+0x54/0x860 [ 196.863331] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 196.863344] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 196.882562] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 196.887394] v9fs_mount+0x73/0x860 [ 196.890926] mount_fs+0x92/0x2a0 [ 196.894276] vfs_kern_mount.part.0+0x5b/0x470 [ 196.898754] do_mount+0xe53/0x2a00 [ 196.902278] ? copy_mount_string+0x40/0x40 [ 196.906578] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 196.911571] ? copy_mnt_ns+0xa30/0xa30 [ 196.915439] ? copy_mount_options+0x1fa/0x2f0 [ 196.919917] ? copy_mnt_ns+0xa30/0xa30 [ 196.923782] SyS_mount+0xa8/0x120 [ 196.927211] ? copy_mnt_ns+0xa30/0xa30 [ 196.931078] do_syscall_64+0x1d5/0x640 [ 196.934947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.940114] RIP: 0033:0x45d5b9 [ 196.943286] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.950973] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 196.958219] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 196.965465] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 196.972715] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 196.979963] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 197.043094] 9pnet: Insufficient options for proto=fd 08:39:20 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) lseek(r0, 0x0, 0x4) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000300)) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x4}, 0x16, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000140)=0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x80, 0x20, 0x83, 0x80, 0x0, 0x4, 0x20200, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0x5}, 0x40, 0xffffffff, 0x100, 0x7, 0x1, 0x0, 0x8}, r1, 0x7, r2, 0x2) 08:39:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:20 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) lseek(r1, 0x40, 0x1) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x30}, 0x80000000}, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0xfffffffe}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9f05}, @in6={0xa, 0x4e23, 0x8b2, @private2={0xfc, 0x2, [], 0x1}, 0x5}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x7, @empty, 0xcd8}], 0xc8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400081, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r3, 0x10, &(0x7f0000000040)={&(0x7f0000000140)=""/158, 0x9e}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='tranr=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 08:39:20 executing program 5 (fault-call:3 fault-nth:16): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:20 executing program 1: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="c7a91d5ee500005c79f9892d90eb526800eb1a7dd34c617f1d7554cf848c610943050b446124dd09003e581f8693fef1ca101561f231b1558ebc6c8e8a", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xd2480, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000200)='status\x00') getdents64(r4, &(0x7f0000004500)=""/4100, 0x1004) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000140)=0x5) read$FUSE(r2, &(0x7f0000000780)={0x2020}, 0x2020) 08:39:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 198.940829] 9pnet: Insufficient options for proto=fd [ 198.953853] FAULT_INJECTION: forcing a failure. [ 198.953853] name failslab, interval 1, probability 0, space 0, times 0 [ 198.963322] 9pnet: Insufficient options for proto=fd [ 198.986010] CPU: 0 PID: 11128 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 198.993925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.003279] Call Trace: [ 199.005858] dump_stack+0x1b2/0x283 [ 199.009506] should_fail.cold+0x10a/0x154 [ 199.013639] should_failslab+0xd6/0x130 [ 199.017596] __kmalloc_track_caller+0x2bc/0x400 [ 199.022246] ? parse_opts.part.0+0x76/0x2d0 [ 199.026665] kstrdup+0x36/0x70 [ 199.029838] parse_opts.part.0+0x76/0x2d0 [ 199.033964] ? p9_fd_show_options+0x190/0x190 [ 199.038455] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 199.043539] ? fs_reclaim_release+0xd0/0x110 [ 199.047946] p9_fd_create+0x86/0x3b0 [ 199.051667] ? p9_fd_create_tcp+0x440/0x440 [ 199.055976] ? __raw_spin_lock_init+0x28/0x100 [ 199.060549] p9_client_create+0x5fd/0x12c0 [ 199.064773] ? p9_client_flush+0x4c0/0x4c0 [ 199.068991] ? __lockdep_init_map+0x100/0x560 [ 199.073467] ? __raw_spin_lock_init+0x28/0x100 [ 199.078031] v9fs_session_init+0x1c5/0x1540 [ 199.082336] ? v9fs_show_options+0x6b0/0x6b0 [ 199.086745] ? v9fs_mount+0x54/0x860 [ 199.090436] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 199.095867] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 199.100865] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 199.105689] v9fs_mount+0x73/0x860 [ 199.109211] mount_fs+0x92/0x2a0 [ 199.112560] vfs_kern_mount.part.0+0x5b/0x470 [ 199.117044] do_mount+0xe53/0x2a00 [ 199.120564] ? retint_kernel+0x2d/0x2d [ 199.124446] ? copy_mount_string+0x40/0x40 [ 199.128661] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 199.133482] ? copy_mount_options+0x1fa/0x2f0 [ 199.137958] ? copy_mnt_ns+0xa30/0xa30 [ 199.141827] SyS_mount+0xa8/0x120 [ 199.145258] ? copy_mnt_ns+0xa30/0xa30 [ 199.149126] do_syscall_64+0x1d5/0x640 [ 199.152996] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 199.158164] RIP: 0033:0x45d5b9 [ 199.161333] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.169019] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 199.176266] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 199.183513] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 08:39:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:20 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x282c0, 0x4556d9f6870a20db) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0xfff}, 0x4) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000240)=""/169, &(0x7f0000000340)=0xa9) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000003c0)=0x4) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000140)=""/236) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='4rans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 199.191803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 199.199072] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:20 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{}, 0x4, 0x214ccfb1, 0x200}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYBLOB="54af003f4e5fc79c03dfc94bc5b1db4cb08f0c3be01ba55fa954be3f60280b5a625782df7e2ed85564f3e423b2b2d173d583ac2687f49fbba3d53eade3a58bd49b367fec4e043e956af2d9d8c4d963e6c7d9", @ANYBLOB='(\x00', @ANYRESOCT=r0]) 08:39:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 199.301522] 9pnet: Insufficient options for proto=fd 08:39:20 executing program 5 (fault-call:3 fault-nth:17): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 199.374333] FAULT_INJECTION: forcing a failure. [ 199.374333] name failslab, interval 1, probability 0, space 0, times 0 [ 199.386383] CPU: 1 PID: 11158 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 199.394276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.403746] Call Trace: [ 199.406345] dump_stack+0x1b2/0x283 [ 199.409983] should_fail.cold+0x10a/0x154 [ 199.413077] 9pnet: Insufficient options for proto=fd [ 199.414136] should_failslab+0xd6/0x130 [ 199.414147] __kmalloc+0x2c1/0x400 [ 199.414156] ? match_number+0x9d/0x200 [ 199.414166] match_number+0x9d/0x200 [ 199.434302] ? match_strdup+0xa0/0xa0 [ 199.438083] ? memcpy+0x35/0x50 [ 199.441345] parse_opts.part.0+0x1b5/0x2d0 [ 199.445569] ? p9_fd_show_options+0x190/0x190 [ 199.450046] ? fs_reclaim_release+0xd0/0x110 [ 199.454437] p9_fd_create+0x86/0x3b0 [ 199.458186] ? p9_fd_create_tcp+0x440/0x440 [ 199.462487] ? __raw_spin_lock_init+0x28/0x100 [ 199.467052] p9_client_create+0x5fd/0x12c0 [ 199.471271] ? p9_client_flush+0x4c0/0x4c0 [ 199.475490] ? __lockdep_init_map+0x100/0x560 [ 199.479968] ? __raw_spin_lock_init+0x28/0x100 [ 199.484530] v9fs_session_init+0x1c5/0x1540 [ 199.488837] ? v9fs_show_options+0x6b0/0x6b0 [ 199.493288] ? v9fs_mount+0x54/0x860 [ 199.496982] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 199.502441] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 199.507439] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 199.512262] v9fs_mount+0x73/0x860 [ 199.515781] mount_fs+0x92/0x2a0 [ 199.519126] vfs_kern_mount.part.0+0x5b/0x470 [ 199.523667] do_mount+0xe53/0x2a00 [ 199.527198] ? retint_kernel+0x2d/0x2d [ 199.531072] ? copy_mount_string+0x40/0x40 [ 199.535287] ? copy_mount_options+0x185/0x2f0 [ 199.539822] ? copy_mount_options+0x18b/0x2f0 [ 199.544296] ? copy_mount_options+0x1fa/0x2f0 [ 199.548768] ? copy_mnt_ns+0xa30/0xa30 [ 199.552637] SyS_mount+0xa8/0x120 [ 199.556070] ? copy_mnt_ns+0xa30/0xa30 [ 199.559949] do_syscall_64+0x1d5/0x640 [ 199.563820] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 199.568990] RIP: 0033:0x45d5b9 [ 199.572157] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.579842] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 199.587089] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 199.594354] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 199.601603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 199.608876] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c [ 199.618619] 9pnet: Insufficient options for proto=fd 08:39:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x8000) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000540)=""/141, 0x8d}], 0x6, 0x8, 0x2c6bd4e6) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) 08:39:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:20 executing program 5 (fault-call:3 fault-nth:18): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x2, 0x401}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3d41bb6b1149a29b4489cd66802c7234490000bd24f83ec91d44c14b89f3da005aa6dea7e7434710d34f1e0d7c6d92060000000940410cf98c42e4d1c96186968c341c84a8", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYRESOCT]) 08:39:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:20 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 199.814473] FAULT_INJECTION: forcing a failure. [ 199.814473] name failslab, interval 1, probability 0, space 0, times 0 [ 199.833872] CPU: 0 PID: 11173 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 199.841780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.851136] Call Trace: [ 199.853734] dump_stack+0x1b2/0x283 [ 199.857371] should_fail.cold+0x10a/0x154 [ 199.861536] should_failslab+0xd6/0x130 [ 199.865517] kmem_cache_alloc_trace+0x29a/0x3d0 [ 199.870189] p9_fd_create+0x135/0x3b0 [ 199.873991] ? p9_fd_create_tcp+0x440/0x440 [ 199.878322] ? __raw_spin_lock_init+0x28/0x100 [ 199.882909] p9_client_create+0x5fd/0x12c0 [ 199.887152] ? p9_client_flush+0x4c0/0x4c0 [ 199.891383] ? __lockdep_init_map+0x100/0x560 [ 199.895864] ? __raw_spin_lock_init+0x28/0x100 [ 199.900429] v9fs_session_init+0x1c5/0x1540 [ 199.904735] ? v9fs_show_options+0x6b0/0x6b0 [ 199.909128] ? v9fs_mount+0x54/0x860 [ 199.912823] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 199.918255] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 199.923255] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 199.928114] v9fs_mount+0x73/0x860 [ 199.931638] mount_fs+0x92/0x2a0 [ 199.934986] vfs_kern_mount.part.0+0x5b/0x470 [ 199.939484] do_mount+0xe53/0x2a00 [ 199.943011] ? copy_mount_string+0x40/0x40 [ 199.947228] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 199.952223] ? copy_mnt_ns+0xa30/0xa30 [ 199.956090] ? copy_mount_options+0x1fa/0x2f0 [ 199.960562] ? copy_mnt_ns+0xa30/0xa30 [ 199.964429] SyS_mount+0xa8/0x120 [ 199.967861] ? copy_mnt_ns+0xa30/0xa30 [ 199.971730] do_syscall_64+0x1d5/0x640 [ 199.975599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 199.980765] RIP: 0033:0x45d5b9 [ 199.983932] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.991619] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 199.998868] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 200.006116] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 08:39:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000002c0)={0x1, 0x3, 0x6}) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)={{0x0, 0x9, 0x1, 0x80, 0x5, 0x6, 0xffffffff, 0x2, 0x1, 0x5, 0xdb8, 0x5, 0x6, 0x6, 0x4}, 0x10, [0x0, 0x0]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r4, &(0x7f0000004500)=""/4100, 0x1004) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x10001, @mcast2, 0xfffffff7}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x8000, 0x10001, 0x3, r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x82800, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '@+'}}, {@smackfsdef={'smackfsdef', 0x3d, '[+\'/(-\'\x95,{\x10(*)'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\t'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, ','}}, {@dont_hash='dont_hash'}, {@subj_type={'subj_type', 0x3d, '!(!^'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0xa4d46b6617a80434, 0x62, 0x61, 0xeaa31d18ed1334d6, 0x38, 0x35, 0xa], 0x2d, [0x63, 0x63, 0x65, 0x64], 0x2d, [0x30, 0x34, 0x66, 0x32], 0x2d, [0x64, 0x31, 0x30, 0x37], 0x2d, [0x64, 0x30, 0x37, 0x62, 0x37, 0x34, 0x32, 0x33]}}}]}}) [ 200.013368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 200.020617] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:21 executing program 5 (fault-call:3 fault-nth:19): pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 200.143229] FAULT_INJECTION: forcing a failure. [ 200.143229] name failslab, interval 1, probability 0, space 0, times 0 [ 200.184592] 9pnet: Insufficient options for proto=fd [ 200.186704] CPU: 1 PID: 11197 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 200.197602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.206954] Call Trace: [ 200.209547] dump_stack+0x1b2/0x283 [ 200.213178] should_fail.cold+0x10a/0x154 [ 200.217334] should_failslab+0xd6/0x130 [ 200.221315] kmem_cache_alloc_trace+0x29a/0x3d0 [ 200.225996] __vb2_init_fileio+0x17f/0xa90 [ 200.230230] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 200.235333] vb2_core_poll+0x4bf/0x5a0 [ 200.239228] vb2_poll+0x9d/0x180 [ 200.240880] 9pnet: Could not find request transport: nd [ 200.242604] vb2_fop_poll+0xfd/0x350 [ 200.242616] ? vb2_fop_release+0xc0/0xc0 [ 200.242624] v4l2_poll+0x133/0x1d0 [ 200.242637] p9_fd_poll+0x21d/0x2e0 [ 200.242647] p9_conn_create+0x388/0x4b0 [ 200.242657] p9_fd_create+0x28e/0x3b0 [ 200.267916] 9pnet: Could not find request transport: nd [ 200.270619] ? p9_fd_create_tcp+0x440/0x440 [ 200.270633] ? __raw_spin_lock_init+0x28/0x100 [ 200.270646] p9_client_create+0x5fd/0x12c0 [ 200.270661] ? p9_client_flush+0x4c0/0x4c0 [ 200.293327] ? __lockdep_init_map+0x100/0x560 [ 200.297830] ? __raw_spin_lock_init+0x28/0x100 [ 200.302414] v9fs_session_init+0x1c5/0x1540 [ 200.306760] ? v9fs_show_options+0x6b0/0x6b0 [ 200.311175] ? v9fs_mount+0x54/0x860 [ 200.314890] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 200.320344] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 200.325462] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 200.330310] v9fs_mount+0x73/0x860 08:39:21 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d6e642c72665f6e6f3d00c8ba88b8df4f21f86ec620e04f63da2ed5cfd58665bf611fb647b95a3d460ed509ac4c15a01e07e1c03f394155ada4b22d6f18e70b24e8f8112d54b81a5771b6c352de352dfe0fe69e66f8a953", @ANYRESHEX=r1, @ANYBLOB="2c7766646e885597394b78af4d7f73536f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x400, 0x4) 08:39:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7221b81e635e", @ANYRESHEX=r0, @ANYBLOB="2c774091de908a550f1017020066646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 200.333856] mount_fs+0x92/0x2a0 [ 200.337227] vfs_kern_mount.part.0+0x5b/0x470 [ 200.341725] do_mount+0xe53/0x2a00 [ 200.345267] ? do_raw_spin_unlock+0x164/0x220 [ 200.349851] ? copy_mount_string+0x40/0x40 [ 200.354127] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 200.359191] ? copy_mnt_ns+0xa30/0xa30 [ 200.363061] ? copy_mount_options+0x1fa/0x2f0 [ 200.367558] ? copy_mnt_ns+0xa30/0xa30 [ 200.371429] SyS_mount+0xa8/0x120 [ 200.374862] ? copy_mnt_ns+0xa30/0xa30 [ 200.378732] do_syscall_64+0x1d5/0x640 [ 200.382601] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 200.387771] RIP: 0033:0x45d5b9 [ 200.390940] RSP: 002b:00007f3a7d921c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.398628] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 200.405876] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 200.413122] RBP: 00007f3a7d921ca0 R08: 0000000020000740 R09: 0000000000000000 [ 200.420371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 200.427628] R13: 00007ffc90d25c7f R14: 00007f3a7d9229c0 R15: 000000000118cf4c 08:39:21 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x200, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0x81}, 'syz0\x00', 0x4b}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dddfc89c9d657dcff494228a758fbe898e433693a223fdcdbe0731cec358980633b254b1862cf04303f5966b35903ff1df354bdd3828577d97fd207429e41c857b440be7553792656e9f1bc990af1b617e7302fc219f2ab0eb038fff164584159d214b8f2962e020a6d7f7ea6d3881b5f73f48518ec0096ddc380d48399ecb0ecf13fa4bfda2b6fa26478f4d370022d959746f0ba", @ANYRESHEX=r1, @ANYBLOB="e2611441ccb7b2c6e727f2ad60c289e195032e29646528790ce98c7d2bb24ef135a9c58f183872bf46979ca1d6a18f7e0e43cf05de857672193d4100c345358711adda36208ba574d6ae8ada00298e0fce13599beffc4dbe63006012eca1ed2bc2dbdaa6d32ba4c06bfafc8d5b786426f8f3dbad7e97ebaba7ba2d685d33c121bc7870a4ac4a1482e9ea7ddef68156d107e57a59e5bd165dc578edc38a139644ea3755e9bbe88423c619419f1b81112f26631f3050eb022871b622961257c25ae94d2eb505d3fb93fb8ffb6aa56e4ccad32b515f95c01f1a845c415baee1102d1c7856dac8ecc085b0e02e46402a03c30f8f70143b00"]) 08:39:21 executing program 4: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x875, 0x400}) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000140)=0x6) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 08:39:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:21 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001800023cfd23cc00000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)=[0x1, 0x0, 0x1f, 0x400, 0x20]) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000000)=0x9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000280)={0x0, 0x1000, @status={[0x4, 0x6, 0x5, 0x7, 0x9, 0xf90f]}, [0x200, 0x7ff, 0xfff, 0x400, 0xfffffffffffffff7, 0x5, 0x7ff00000000000, 0x0, 0x1f, 0x3, 0xe0000000, 0x4cf338c8, 0x6, 0x1, 0x24, 0x10001, 0x5, 0x2, 0x2, 0x5, 0x4d6a9c67, 0x7503, 0x7, 0x4, 0x4, 0xfffffffffffffff9, 0x6, 0x81, 0x0, 0x6, 0x9, 0xff, 0x200, 0x3, 0x3, 0x100000001, 0xffff, 0x3, 0xd020, 0x7ed1, 0x101, 0x3, 0x9, 0x80000001, 0x6, 0x1, 0x401, 0x92df, 0xb6, 0xf060, 0xffffffffffffff6e, 0x7fff, 0x3, 0x5, 0x1000, 0x80000000, 0x862, 0x7f, 0x255, 0x3, 0x9, 0x3, 0xffff, 0x1]}) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) 08:39:21 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:21 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}]}, 0x48}}, 0x4040000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 200.590449] 9pnet: Insufficient options for proto=fd 08:39:21 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:22 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in6={0xa, 0x4e23, 0x5, @local, 0x4}, @in6={0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}], 0x90) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:22 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000140)) getrlimit(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000240)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) mlockall(0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 08:39:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:22 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_hash='dont_hash'}, {@hash='hash'}, {@fowner_gt={'fowner>', r7}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r9}}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '['}}, {@subj_user={'subj_user', 0x3d, 'uid<'}}, {@smackfshat={'smackfshat', 0x3d, 'trans=fd,'}}]}}) 08:39:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:22 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:22 executing program 1: pipe(&(0x7f00000000c0)) creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @remote}, @dev={0xfe, 0x80, [0x0, 0x8, 0x14, 0x8, 0x0, 0x4, 0x7, 0xb, 0x2, 0xb, 0x3, 0x8, 0x8]}}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYBLOB="080000000000fbdbdf253d00291c0000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001acaa3542c0309ff5696d0000000f0002006e657464657673696d3000001c006f00736f757263655f6d61635f69735f6d756c745c99ee12da278b3d292070563b569cd89035f793ea9f75433e21df8bb3e81206d23b32476011a3089d039ff8eb27c66578e9f3727a2f15f628a29b88f8"], 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x0) fstat(r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}]}}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x600, 0x0) 08:39:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x7, 0xca09, 0x2, 0x6, 0x9, 0x5, 0x800}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2004c090) 08:39:22 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:22 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socketpair(0x1, 0x0, 0x1000, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x40, 0x4) 08:39:22 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x10001) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x2080, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:23 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0x10, 0x1, 0x80000000, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000180)=""/236) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x10400, &(0x7f00000001c0)=ANY=[]) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280), 0x0) 08:39:23 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x100040, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) 08:39:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000a40)=ANY=[], 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001580)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x20}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000000)=""/39, 0x27}], 0x5}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x5) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x400000000) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x10, r2, 0x0) 08:39:24 executing program 1: waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x2, &(0x7f0000000140)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="7b803e779c98ea667dfc9d60ec0ca9666faa0906e5596ae5cf16789c6dbfcbbb66afef61467a75e3ba95352db63faa8214c9eb249b80582a0518f21ef071f07c9091522a945361e09eda7fc463be2930770c1c1f8f06c9f894655ec423ee821ede217edb0b21b5c758ab10456c4da60d34d245c8653e402964dcf12ae24c467835899e8ac2daed269b96"]) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68) 08:39:24 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\v\x00']) 08:39:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:24 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:24 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8a001, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x0, 0x5, 0xffff, 0x5e, 0x10001, "a17035177c3637b171d6a5d352fa234756ea7402a7c58585811ff2fc7354fb34eb9d9fc80c9b40369d57b92f30c842be863b"}}, 0x14a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vim2m\x00', 0x2, 0x0) [ 202.930276] 9pnet: Insufficient options for proto=fd [ 202.936555] 9pnet: Insufficient options for proto=fd [ 202.943653] 9pnet: Insufficient options for proto=fd [ 202.959315] 9pnet: Insufficient options for proto=fd 08:39:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fsname={'fsname'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) 08:39:24 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d661f00000000000000", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:24 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8a001, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x0, 0x5, 0xffff, 0x5e, 0x10001, "a17035177c3637b171d6a5d352fa234756ea7402a7c58585811ff2fc7354fb34eb9d9fc80c9b40369d57b92f30c842be863b"}}, 0x14a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vim2m\x00', 0x2, 0x0) [ 203.047701] 9pnet: Could not find request transport: f 08:39:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c200a2, r4}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c200a2, r8}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="bdd3b3fe0bf00d825e9f6d40781fa8f2d222ac3d57cf74860493f9d6e8672908905e569b0d74b77728920bbab9193e5ef9ed06e752734e1b8389e88b353ee621fc74b68989516dbda6467b7d3036f5498ff2b4750e155f114925781530e80b2b62fcf5e49bea249bfbe8f1863ab634fbff24ee9bcf530030958bf968e935b1f46fef3355357e3922da873b51ebebcbc5a9b3fafaa357e9a26e5dc3914c3991fef875084fa4b4ebd371", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="0800090004000000"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x8004800) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0xc0d4) pipe(&(0x7f00000000c0)) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r10 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c0065ad9faa0dd4c63595a9b2c261f7ba5511a6a8e0e30c569dd3cef9c808000000a1c496a2656f05458cbd8aeb01732813f3bf78242c9e"]) 08:39:24 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8a001, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000000c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x0, 0x5, 0xffff, 0x5e, 0x10001, "a17035177c3637b171d6a5d352fa234756ea7402a7c58585811ff2fc7354fb34eb9d9fc80c9b40369d57b92f30c842be863b"}}, 0x14a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vim2m\x00', 0x2, 0x0) 08:39:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000000)=0x8000, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={0x0, 0xa7c}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x1fe, 0x6}) 08:39:24 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:24 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:24 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x4, "ac8a8738d868a8c3c259e123c8408adf7d8c27448cc330be6fec8903c6c2b790", 0x0, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x6038, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66743487bb0bb22c7266646e6f3d", @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="b61fd7f15315e193bd433f446bc67e16f17b6d2e25389dc0e8b729c2a70e3233ef5ef5fe50ee0884e35d4cd9dfe2a3bc0a6d4ed1459f81b951f38e7bbddb187651017ffa37480f7ce160ea73ed1f90ab1a397c228a327105bb587445c8c1b16f688c58a14219e3f0308f40de16e694ff2b4340f9240ee812f090b254409178ab80b8037deef6a82a0dd088c92a66176d766fb4c7ab472eb141be0b0e5ebe5b180d3ace0f5b1eb7a040c7", @ANYBLOB=',\x00']) 08:39:24 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) sysinfo(&(0x7f0000000140)=""/134) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:25 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r1, &(0x7f0000002980)={&(0x7f00000027c0)={0x27, 0x1, 0x1, 0x5, 0x8, 0x3, "ca1fafeeecaea046132b750f5da8ba8763a0232f89388f3872b87f503df4990ba28604936bb89e8415650a803b03c5745d6e5a530802e61b701d5b111ac71d", 0x35}, 0x60, &(0x7f00000028c0)=[{&(0x7f0000002840)="17d279e057d831f5dbe9cb9ce8f5e124feeb2a66f05a9d0f95baf318902f4958872fc414a1ef0776bf8f7fe77693979ed3a276019edb1e022eb68d259d8ec8f276e35442de9fed10992da6637f8749db233ecd6ace505c1f80f43a9953bbb326d7653289110f4b4532b7f3db74250160d492fee56e82902fcb2cf719", 0x7c}], 0x1, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x78, 0x24004000}, 0x800) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001fc0)=[{&(0x7f0000000080)=0x2, 0x2}, {&(0x7f0000000140), 0x2}, {&(0x7f0000000180)=0x2, 0x2}, {&(0x7f00000001c0)=0x2}, {&(0x7f0000000200)=0x2, 0x1}, {&(0x7f0000000240), 0x1}, {&(0x7f0000000280)=0x2, 0x1}, {&(0x7f00000002c0)=0x2}, {&(0x7f0000000300)=0x1, 0x1}, {&(0x7f0000000340)=0x1, 0x1}, {&(0x7f0000000380)=0x2, 0x1}, {&(0x7f00000003c0), 0x2}, {&(0x7f0000000400)=0x2}, {&(0x7f0000000440)=0x2}, {&(0x7f0000000480)=0x2, 0x2}, {&(0x7f00000004c0)=0x2, 0x1}, {&(0x7f0000000500), 0x2}, {&(0x7f0000000540)=0x1}, {&(0x7f0000000580)=0x2, 0x2}, {&(0x7f00000005c0), 0x2}, {&(0x7f0000000600)=0x1}, {&(0x7f0000000640)}, {&(0x7f0000000680), 0x1}, {&(0x7f00000006c0), 0x1}, {&(0x7f0000000700)=0x2}, {&(0x7f0000000780)=0x2, 0x2}, {&(0x7f00000007c0)=0x2}, {&(0x7f0000000800), 0x2}, {&(0x7f0000000840), 0x1}, {&(0x7f0000000880)=0x1, 0x1}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=0x1}, {&(0x7f0000000940)=0x1, 0x1}, {&(0x7f0000000980), 0x2}, {&(0x7f00000009c0)=0x2, 0x2}, {&(0x7f0000000a00), 0x2}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=0x1}, {&(0x7f0000000ac0)=0x1, 0x2}, {&(0x7f0000000b00)=0x1, 0x1}, {&(0x7f0000000b40)=0x1, 0x9}, {&(0x7f0000000b80)=0x1, 0x1}, {&(0x7f0000000bc0), 0x1}, {&(0x7f0000000c00)}, {&(0x7f0000000c40), 0x2}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=0x2, 0x1}, {&(0x7f0000000d00)=0x1, 0x2}, {&(0x7f0000000d40)=0x2}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)=0x2, 0x2}, {&(0x7f0000000e00)=0x2, 0x2}, {&(0x7f0000000e40), 0x2}, {&(0x7f0000000e80)=0x1}, {&(0x7f0000000ec0), 0x1}, {&(0x7f0000000f00)=0x1, 0x2}, {&(0x7f0000000f40)=0x2}, {&(0x7f0000000f80), 0x2}, {&(0x7f0000000fc0), 0x1}, {&(0x7f0000001000), 0x1}, {&(0x7f0000001040)=0x1}, {&(0x7f0000001080)=0x2, 0x2}, {&(0x7f00000010c0)=0x2}, {&(0x7f0000001100)=0x1, 0x1}, {&(0x7f0000001140)}, {&(0x7f0000001180)=0x1, 0x2}, {&(0x7f00000011c0)=0x1, 0x2}, {&(0x7f0000001200), 0x2}, {&(0x7f0000001240)=0x2}, {&(0x7f0000001280)=0x1, 0x2}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=0x1, 0x2}, {&(0x7f0000001340)=0x1, 0x2}, {&(0x7f0000001380), 0x1}, {&(0x7f00000013c0)=0x1, 0x1}, {&(0x7f0000001400)=0x1}, {&(0x7f0000001440)=0x1, 0x1}, {&(0x7f0000001480), 0x1}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=0xffffffff, 0x2}, {&(0x7f0000001540), 0x1}, {&(0x7f0000001580)=0x1, 0x2}, {&(0x7f00000015c0), 0x1}, {&(0x7f0000001600), 0x2}, {&(0x7f0000001640)=0x1, 0x2}, {&(0x7f0000001680)=0x1, 0x2}, {&(0x7f00000016c0)=0x2}, {&(0x7f0000001700)}, {&(0x7f0000001740)=0x2, 0x1}, {&(0x7f0000001780)=0x1, 0x2}, {&(0x7f00000017c0)=0x1, 0x1}, {&(0x7f0000001800), 0x1}, {&(0x7f0000001840)=0x1, 0x1}, {&(0x7f0000001880)=0x2, 0x1}, {&(0x7f00000018c0), 0x2}, {&(0x7f0000001900)=0x1}, {&(0x7f0000001940)=0x1, 0x2}, {&(0x7f0000001980), 0x1}, {&(0x7f00000019c0)=0x1, 0x2}, {&(0x7f0000001a00), 0x1}, {&(0x7f0000001a40)=0x2}, {&(0x7f0000001a80)=0x2, 0x1}, {&(0x7f0000001ac0)=0x1}, {&(0x7f0000001b00), 0x2}, {&(0x7f0000001b40)=0x1, 0x1}, {&(0x7f0000001b80)=0x1, 0x1}, {&(0x7f0000001bc0)=0x1, 0x2}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=0x5}, {&(0x7f0000001c80)=0x1, 0x2}, {&(0x7f0000001cc0)=0x1}, {&(0x7f0000001d00)=0x1, 0x1}, {&(0x7f0000001d40)=0x1, 0x2}, {&(0x7f0000001d80)=0x2}, {&(0x7f0000001dc0)=0x2, 0x1}, {&(0x7f0000001e00)=0x2, 0x1}, {&(0x7f0000001e40)=0x2, 0x1}, {&(0x7f0000001e80), 0x2}, {&(0x7f0000001ec0)=0x1}, {&(0x7f0000001f00)=0x1, 0x2}, {&(0x7f0000001f40)=0x2, 0x1}, {&(0x7f0000001f80), 0x2}], 0xd, 0x7a, &(0x7f0000002780)={0x0, 0x3938700}, 0x0, 0x0) 08:39:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x800400, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="f916a3c8eab5cb", @ANYRESHEX=r2, @ANYBLOB=',measur\x00\x00\x00\x00\x00\x00\x00\x00ontext=root,\x00'/39]) 08:39:25 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="4058fe619b5924434a0fefcc3dcabf33f62d80586b19fb3a0651a5ed900db3a4a6fc96aa3384b90555511a88c83d610e4f4bb2d654ad8e196fa311cb9dd43040f0fc3980d9cd245af1d978fc73f5b8978da594a5038ead08b023af423072e4d6056d0d80b41d5f81853aeba2c3feaaaea63b83b823c2602fac1cec890075b9c5caa13cdf1f"]) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) 08:39:25 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x10000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) [ 203.953546] 9pnet: Insufficient options for proto=fd [ 203.962332] 9pnet: Insufficient options for proto=fd 08:39:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffe87, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='iommit=0x0000000000000000,\x00']) [ 203.994993] 9pnet: Insufficient options for proto=fd [ 204.006725] syz-executor.0 (11390) used greatest stack depth: 24808 bytes left 08:39:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c72f8280078c616e71f66646e9c28", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x8000, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000180)={0x9, 0x3f}) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 08:39:25 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2) [ 204.040949] EXT4-fs (loop0): Unrecognized mount option "iommit=0x0000000000000000" or missing value [ 204.065183] 9pnet: Insufficient options for proto=fd [ 204.084513] 9pnet: Insufficient options for proto=fd 08:39:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d6649e47266646e6f3d1b5026a5852f1b92a16cffd21c", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000180)) [ 204.138878] 9pnet: Could not find request transport: fIrfdno=P&/l0x0000000000000005 [ 204.159697] EXT4-fs (loop0): Unrecognized mount option "iommit=0x0000000000000000" or missing value [ 204.172270] 9pnet: Could not find request transport: fIrfdno=P&/l0x0000000000000005 08:39:25 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00') 08:39:25 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf2506000000080004000004000008000600050000000800060071a9000020000180070006006e7100000c000700330000000000000008000500000000003c000180060002003b000000080005000200000008000b0073697000060002005e0016000876660007000600727200002c00028005000d0001000000060002004e2100000800040003000000080006000000f1ff050002004e220000"], 0xb4}, 0x1, 0x0, 0x0, 0x48815}, 0x40000015) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:25 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000d5010400000000010000f793000025bd4286be9084baa5b5db0700000068000a010000"], 0x92) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r2, r3+60000000}, &(0x7f00000000c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 08:39:25 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = geteuid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d541b274e603655944d34dc4d460500"/39, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',defcontext=staff_u,appraise_type=imasig,fowner>', @ANYRESOCT=r2, @ANYBLOB=',fowner<', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r2, @ANYBLOB=',obj_type=,permit_directio,smackfstransmute=!/,measure,appraise_type=imasig,\x00']) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r4, &(0x7f0000004500)=""/4100, 0x1004) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1ff}, &(0x7f0000000180)=0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 08:39:25 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x3) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd25, 0x1, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '9p\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8854}, 0x2000c884) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000240)="d0460e36d40522a2bb37b2fae5b6098a06089b19428ee0682f742b2d373c620f8a25efeee3f1650fb7ff120aa89fd812ae3178e46fe334d7179702dc1740970b015ee918ba026919c15df08af59c5e6061a9208274337ef85efa6d9129299d13f613e4819c8b852b69112a9a4bfac759a3c076a2d93ef91618167af7ac367d8c8bc5ceb9b54ea6b89e0066c7877246f38e40ec356d5eb6b70ba79729a8f063214a6f2f8be59d6ea7914a3e28c25d27d177e26b", 0xb3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trand,rfdno=\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) [ 204.758960] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 204.758960] program syz-executor.0 not setting count and/or reply_len properly 08:39:26 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d42e2534989c906683ae56950f4806f72cca39a0014845c901fd347a84a31aa1999ba48c2bf6e360bd43d8b6beaa09a8c79f1f51b358a7603d4498bf70d74fc62d26ac3404021116fccff95678b7050534e65a2d5a41d76db2e323a11ec6f97bf27d67dc334e8cd62def9bd38b9365af6e1f1274dc3bdc39b2697a06d770382105db14599c0554407baaf369681b49a9275dacae708c34a8d5d53d509074d897fd22a77e60dc9a665b8de346523bb", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:26 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TCFLSH(r0, 0x540b, 0x1) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 204.911837] 9pnet: Insufficient options for proto=fd [ 204.923238] 9pnet: Insufficient options for proto=fd 08:39:26 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:26 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:26 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000009, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="7a4c0d1e166d3b27d37a1113aca6cbcffb4ae096483bac547712b2ecacd3a98f561c863bef000000", 0x28}], 0x1, 0x0, 0xfffffffffffffd66}, 0x0) 08:39:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0xd990, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000180)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fd/4\x00') ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) preadv(r3, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x4c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x29b5103eee5258a4, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4042}, 0x95) [ 205.551422] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 205.551422] program syz-executor.0 not setting count and/or reply_len properly 08:39:26 executing program 5: arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:26 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:26 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001780)='/dev/uhid\x00', 0x2, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x189) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x119) write$P9_RWRITE(r1, &(0x7f0000001a00)={0xb, 0x77, 0x80, 0xffffffff}, 0xb) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x70, 0x4) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) tkill(r3, 0x1c) 08:39:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904064865160b005b00100000000000b2140e000a0002000000dc2976d153b4", 0x2e}], 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf251f0000000400cc0007002100626200000400cc00080001000000000008009a0001000000050092002e5473add2fdda100e18fe44546acf45c30000000500920000000000"], 0x44}}, 0x8895) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000240)="5f8252f0d1d4c6a74fa1e81727ebec4099fb4a072459c4fca85cfcb5cf38c1a552f96d16cb021e7b0888a5fc93a0c8aaeaa237b2c9633bb1e90dcd517a5e30f7498e578b58746665368d0f448046f036b1e89c7182006e7dea6fc9ec5602a15302674f9541eee656413250b5fc64d2319645630e2e6b6fdf1b211887551b7f6e2ed24feb00db048c9e676153540528262aa9f146329a52eea5f7c44484e3f8123c7fa657b2aeddc90baf87b4adbf1e7dad32e373702863de154c70") sendfile(r0, r1, 0x0, 0xa808) pipe(&(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000000c0)) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x10, 0x3f2, 0x200, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000801}, 0x20000004) [ 205.750168] audit: type=1804 audit(1599813566.868:21): pid=11541 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/96/bus" dev="sda1" ino=16012 res=1 08:39:26 executing program 4: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x7ed, 0x2, 0x4, 0xe000, 0x9, {0x0, 0x2710}, {0x5, 0x8, 0x4, 0x4, 0x4f, 0x5, "a10f9cc7"}, 0x86f, 0x4, @userptr=0x8, 0x6, 0x0, 0xffffffffffffffff}) r1 = request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='fd/3\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1}, &(0x7f0000000340)=""/86, 0x56, &(0x7f0000000440)={&(0x7f00000002c0)={'blake2b-512\x00'}, &(0x7f00000003c0)="41ffbe9c17773675aaadf3e9af7e2986ffc93d0e4480bae7b01bd996405a9ea3179ba2e01a641253996c9b6a97c03297b90833e1746873efe0b567f3a5de976b12bd5d10157af6a53ccbb3f26f7e6f3bc0caa87a297b9eff8e759f", 0x5b}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000480)=0x9, &(0x7f00000004c0)=0x4) pipe(&(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766706e6fbd", @ANYRESHEX=r4, @ANYBLOB=',\x00']) [ 205.793970] audit: type=1804 audit(1599813566.868:22): pid=11543 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/96/bus" dev="sda1" ino=16012 res=1 08:39:26 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000280)={0x83, 0x1e, 0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x400, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xce, &(0x7f0000000100)=""/48, &(0x7f0000000140)=0x30) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 08:39:27 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 205.886188] 9pnet: Insufficient options for proto=fd [ 205.904894] 9pnet: Insufficient options for proto=fd 08:39:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:27 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 206.277930] 9pnet: Insufficient options for proto=fd 08:39:27 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @identifier="366d4a31a810329593c525c62d16ea67"}}) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:27 executing program 1: pipe(&(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket(0x3, 0x2, 0x5) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x87, @broadcast, 0x4e20, 0x4, 'lblcr\x00', 0x1, 0x80000001, 0x7}, 0x2c) 08:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x82, 0x0, 0x0, 0xff}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc5e]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x124, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffa}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5c5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}]}, 0x124}, 0x1, 0x0, 0x0, 0x80c0}, 0x44000) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:39:27 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x4, 0x1, 0x4, '\x00', 0x1f}, 0x0, [0x5, 0x800, 0xf7f0, 0x4, 0x8, 0x28000000000, 0x3, 0x200, 0xffff, 0x3ff, 0x5, 0x3, 0x6, 0x0, 0x7fff, 0x101, 0x2, 0xfffffffffffff801, 0x9, 0x23f4, 0x0, 0xffffffff, 0x7fff, 0x100000000, 0x6, 0x0, 0x2, 0x101, 0x8, 0x150f, 0x2, 0x7, 0x954, 0x4, 0x0, 0xffffffffffffffc3, 0x40, 0x3, 0x9, 0x1ff, 0x10001, 0x3ff, 0x1, 0xe7, 0x1f, 0x6, 0x9, 0x800, 0x1, 0x100000000, 0x6, 0x0, 0x66, 0x6, 0x28a, 0x100, 0x8, 0x6, 0x8, 0xffffffff, 0x7, 0x1, 0x7, 0x9, 0x61eb, 0xfff, 0x100000001, 0x7, 0x5e5, 0x7fffffff, 0x7, 0x9, 0x452, 0xca, 0x0, 0xfff, 0x1, 0x0, 0xfffffffffffffffe, 0x7, 0x8000, 0x8, 0x56, 0x0, 0x6, 0x101, 0x0, 0x0, 0x3ff, 0xfff, 0xffffffff, 0x1ff, 0x81c, 0x9, 0xe3c, 0x5a, 0x1, 0x4, 0x8000, 0x7ff, 0x0, 0x8, 0x100000001, 0x8271, 0x1227, 0x3, 0x800, 0x9, 0x1, 0x8, 0x401, 0x4, 0x5, 0x2, 0x5, 0x1, 0x3, 0x5, 0x3, 0x728, 0x1, 0x3, 0x9, 0x1f, 0x0, 0x8, 0x100000000]}) pipe(&(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000000)=0x2) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:28 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 207.107064] 9pnet: Insufficient options for proto=fd 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, 0x0, 0x0, 0x20c49a, 0x0, 0x0) 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 08:39:28 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001800ed0100000000000000000a04100080000008"], 0x28}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) sendmmsg$alg(r4, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='9p\x00', 0xcdf34597157b5db4, &(0x7f0000000280)=ANY=[]) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) r8 = fcntl$getown(r4, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r0, r9, 0x1c1}) 08:39:28 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000001c0)={0x2}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a68b7591fb9c"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0882}, 0x40810) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="e1a4486b8fc393082c003b24d45b83d9ab17fc309f78bf3fbc556525aa75f11236d7786834196772b76eabe527ca5039dbcddce4cffad32cb1c882"]) [ 207.484672] 9pnet: Insufficient options for proto=fd 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 08:39:28 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x61, 0x39, 0x31, 0x0, 0x37, 0x64], 0x2d, [0x32, 0x36, 0x31, 0x66], 0x2d, [0x66, 0x62, 0x65, 0x34], 0x2d, [0x33, 0x62, 0x32, 0x36], 0x2d, [0x0, 0x66, 0x33, 0x38, 0x32, 0x36, 0x65, 0x63]}}}, {@fsname={'fsname', 0x3d, ')[$]*}'}}, {@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@*k-\x17&X'}}, {@smackfsroot={'smackfsroot', 0x3d, '\xb8#'}}, {@fsname={'fsname', 0x3d, 'trans=fd,'}}, {@audit='audit'}, {@fsname={'fsname', 0x3d, ':V&\xd8'}}, {@dont_appraise='dont_appraise'}]}}) 08:39:28 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:28 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000380)=""/69, &(0x7f0000000400)=0x45) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsa\x00', 0x40800, 0x0) write$P9_RWALK(r4, &(0x7f0000000480)={0x16, 0x6f, 0x1, {0x1, [{0x8, 0x2, 0x3}]}}, 0x16) keyctl$search(0xa, r3, &(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, r1) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="87622d9268e3c0d2e90f87966603b11211fb35f10382ff7a6f82fe7fbe197584543bceec55b286e5ecf77314a7314fd230e241d0c9084b9c9770617b735a30ff0e00b7e7b48b5b8bb1cc24f7d89ed49a8078c2d54d6d7e9033372083bf3812e6c9dc3dfa50c20a183250095b0cd6b992573213e5bdc75674f661f6", 0x7b, r1) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="452662b986c84ff4ed03e633d373b823d48030a084b939f9207f5e1d9b8efec8981e489e22ee363d1eae5a1aaa36961eda02e9f5e49b162a855c4ac7c8bdbf8f06cf0eef9e3b10ef90c5ec16f6a011b92dd8fbffe8204efb3345185e65cad1931637bd1294e10ee7214f1f509a6a1093aa2736b07a154e21ca0d8997098e002172c155f82845276dec69bffb3a3585d32cb77a0925a8b8b2a50080ef9a3c40a011d1a20d6102570a133ebdb1cb7c7b318df8ea6425828c06fa8ac1c2e354a6a478084c7fc3104155d7552e5553d54d81ef79ca7828cdbbfbc61d76", 0xdb, 0x13800000000000}, {&(0x7f00000001c0)="25448c044355dd630dba824fa4", 0xd, 0xcff}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="84047363612ca07800"/19]) r6 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000340)=@generic={0x3, 0x9, 0xc3}) 08:39:28 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0) 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) [ 207.928852] 9pnet: Insufficient options for proto=fd 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x20c49a, 0x0, 0x0) [ 207.950291] jfs: Unrecognized mount option "sca" or missing value 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 08:39:29 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1f}}]}}) 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab", 0x3a, 0x20c49a, 0x0, 0x0) 08:39:29 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="bf816e013b2c7766646e6f3de99487608a44caccb1a852a011835b19cf1bdecc02ba84f8044d5df5bc861fc143504dc5f7973686e55926c6886bb4fefe793b1e0d3f51c5d18bdc999886b3fc756a5298f8f39688f09b5bae7d8e47bd60eb9f5c8d0054ec760cd2a009725afb117f638c03df5cd74c21b47c4537577cc6f6c1b718b77ee28b6616b5d56713d960273e1d3e37090bb7a22c57df65e2a52efb63cae4d2529c6bba6bd78d89e60f8c02347fefce548bf024b866e4f1", @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 208.463476] 9pnet: Insufficient options for proto=fd [ 208.470514] 9pnet: Insufficient options for proto=fd 08:39:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a", 0x44, 0x20c49a, 0x0, 0x0) [ 208.682877] jfs: Unrecognized mount option "sca" or missing value 08:39:29 executing program 0: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:29 executing program 1: pipe(&(0x7f00000000c0)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00') ptrace$peeksig(0x4209, r0, &(0x7f00000001c0)={0x7, 0x0, 0x4}, &(0x7f0000000200)=[{}, {}, {}, {}]) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) sched_setparam(0x0, &(0x7f0000000180)=0x1ff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',\bfdno(', @ANYRESHEX=r2, @ANYBLOB="2c00068c4e4952200b789c234ebbcaddd82d70ec78b9b3226b2735fdc847ac9b57a1bbf6083e989c65e63ee72a2d024302fd"]) 08:39:29 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x400, 0x800) r3 = dup2(r1, r1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r4, &(0x7f0000004500)=""/4100, 0x1004) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x7, 0x40, 0xc17}}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0xffffffff, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdnod', @ANYRESHEX=r0, @ANYBLOB=',wfd\x00o=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a", 0x44, 0x20c49a, 0x0, 0x0) [ 208.781755] 9pnet: Insufficient options for proto=fd 08:39:29 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000140)={0x980000, 0x5, 0xdf38, r5, 0x0, &(0x7f0000000040)={0x980903, 0x0, [], @ptr=0xffffffff80000001}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733de6b42c7266646e6f3de5fa2a91e0381cdded3418860b9a168414501115adb5062b3c6c4858aa66eb86b545346332d738648198df75e51fd65bda3294ff57a0550a6f5468c8cbe899c9a84f45f80f4ae2a8ffc2d088117a994eb06cc59225c7844cb6a847af4108a6c7e757f8f3742fe058067a9c6770c4f19601d7efebd97efb2890cbb5752245eebac177203495d0fafa1749ded28a36fa6cbf69ca9a446c17ad", @ANYRESHEX=r1, @ANYBLOB="2c756664b9e56e", @ANYRESHEX=r2, @ANYBLOB=',\x00']) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(0xffffffffffffffff, r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000001c0)={0x63ba, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="01e523005698399036", @ANYRES32=0x0], &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000005c0)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e24, 0x5, @private0, 0x8}}}, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000003c0)={r10, 0x6f, 0x2}, 0x8) 08:39:29 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a", 0x44, 0x20c49a, 0x0, 0x0) [ 208.803430] 9pnet: Insufficient options for proto=fd [ 208.809203] 9pnet: Insufficient options for proto=fd [ 208.837913] 9pnet: Insufficient options for proto=fd [ 208.838772] 9pnet: Insufficient options for proto=fd 08:39:30 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x4, 0x2080) fgetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000140)=""/135, 0x87) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:30 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="741e1fb008eb00000d0000006e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:30 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000780)={0x2, 0x1000, "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"}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) [ 208.953891] 9pnet: Could not find request transport: 08:39:30 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) 08:39:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x100}, &(0x7f0000000100)=0x8) 08:39:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf74", 0x49, 0x20c49a, 0x0, 0x0) [ 209.586854] 9pnet: Insufficient options for proto=fd 08:39:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 08:39:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="d687a900", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2507000000050006000400000005000d000100000006001c001499000014001f00ff02000000000000000000000000000108001900ac1414bb0600010008000000080011000100000005000600d400000006000100050000000500050000000000050013000700000005000600020000000500130007000000"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0xc79}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="007b00cc7c856705a58e0092be29437f8241e3266817c5ba87a5581e1bf4c4dd2deb3b6a6f19d3650fdd7381947567a889ed2c49b5c5831fb1ed34c68c6162b0f8ce"], &(0x7f0000000000)=0x3e2) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 08:39:30 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x21040, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c958ec1c969745f646972656374696f2c7063723d30303030303030303030303030303030303031352c00"]) r2 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000040)={0x1, 0xfffffffc, 0x4, 0x80000001}, 0x10) 08:39:30 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 08:39:30 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472050000000000000066646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 209.701383] 9pnet: Could not find request transport: 08:39:30 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:31 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xffff, 0x0, 0x200, 0x0, 0x2}) 08:39:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec", 0x4b, 0x20c49a, 0x0, 0x0) 08:39:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:31 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=trans=fd,,nodevmap,dfltuid=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6c6f6f73652c00905e847a3b7e2781ae488d5ff5e9ae79dce5ef31734d68d6aa6afbc8bc3985b63f0ed2ddb3d3ca6b25e43d3a40abf3ec133d7e72b8fe9e3adc58986c15a740b2ae6e7cb6ae5ad156f26baddcf111a90103c169342aa55db0f98af4c3f79433db6ebe6d3e084d9f2e4d851c7b0720207e24e66becd8b2696996f366e609bb292d4d1e7c0e68bf7f34af2eb751367f8656e975a60284a544737bac0dda79795853ab12a4fd7d65298f170985c2664cbe941b49ceefb2bab8c8d7e60e8b6de788a888db346399446f2b59db872f11b2919d9101c6cbc952"]) 08:39:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="d687a900", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2507000000050006000400000005000d000100000006001c001499000014001f00ff02000000000000000000000000000108001900ac1414bb0600010008000000080011000100000005000600d400000006000100050000000500050000000000050013000700000005000600020000000500130007000000"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0xc79}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="007b00cc7c856705a58e0092be29437f8241e3266817c5ba87a5581e1bf4c4dd2deb3b6a6f19d3650fdd7381947567a889ed2c49b5c5831fb1ed34c68c6162b0f8ce"], &(0x7f0000000000)=0x3e2) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 08:39:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 08:39:31 executing program 1: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000180)={0x0, 0x17a8d9b6, 0x100, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a97, 0x7, [], @p_u8=&(0x7f0000000040)=0x7}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0xa64002, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@hash='hash'}, {@context={'context', 0x3d, 'root'}}]}}) 08:39:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) 08:39:31 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2080, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 210.401005] 9pnet: Insufficient options for proto=fd 08:39:31 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66", 0x4c, 0x20c49a, 0x0, 0x0) [ 210.506055] 9pnet: Insufficient options for proto=fd 08:39:31 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000100)) r2 = dup(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0xd071, 0xd5, 0x20}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff000000000000000032c0687a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c00"/319], 0x184}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)={0x0}) r6 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x145143, 0x3) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x60, 0x1, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFQA_PAYLOAD={0x14, 0xa, "318bec4b47f15e109574855372a7d15f"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10000}}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x100}]}, @NFQA_PAYLOAD={0xd, 0xa, "cf6293e034bf186d74"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x60}}, 0x40044) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r7, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000000c0)={r5, 0x0, r7, 0x4}) [ 210.563545] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.639061] audit: type=1400 audit(1599813571.758:23): avc: denied { write } for pid=11862 comm="syz-executor.0" name="map_files" dev="proc" ino=41061 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 08:39:31 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:31 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77669e2d5ae1", @ANYRESHEX=r1, @ANYBLOB="f56f"]) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x121000, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xa, 0x1e, 0x10, "9ff4210cf291c8ce6d8d68bc55a56488c65d2553c5f7a78715600c97816e4f939321e5a1c7fc14ef504288890d45ee01a9a5aed0688eb97e9322d7d2f0cacd83", "32af6810ad2180f7ae68dd56eabc4f339a28bbb0378909746881c6a2d8ce2c5cadb5b08381e324468d8c35e20cb48b83ad3bdce8f2ad4498499b55fce7720376", "30f9c9f9e235b2b6530bf624e6173744f63ad87fd212ef94da743e1246991e2c", [0x9]}) 08:39:31 executing program 1: r0 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/166) pipe(&(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 210.669350] audit: type=1400 audit(1599813571.758:24): avc: denied { add_name } for pid=11862 comm="syz-executor.0" name="file0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 210.691272] audit: type=1400 audit(1599813571.758:25): avc: denied { create } for pid=11862 comm="syz-executor.0" name="file0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 210.754621] 9pnet: Insufficient options for proto=fd [ 210.770068] 9pnet: Insufficient options for proto=fd 08:39:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 08:39:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 08:39:32 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766706daf8a1a65646e6f3d00000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) [ 211.180759] 9pnet: Insufficient options for proto=fd 08:39:32 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 08:39:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @mcast2}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x8001, 0x6a, 0x401, r4}, &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6f3d0000000000060000000000000000", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) socket$pptp(0x18, 0x1, 0x2) 08:39:32 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 211.362165] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. 08:39:32 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2080, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:32 executing program 3 (fault-call:12 fault-nth:0): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 211.515159] 9pnet: Insufficient options for proto=fd [ 211.516797] 9pnet: Insufficient options for proto=fd 08:39:32 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140)='9p\x00', 0x10020, &(0x7f0000000140)=ANY=[]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 211.612671] FAULT_INJECTION: forcing a failure. [ 211.612671] name failslab, interval 1, probability 0, space 0, times 0 [ 211.663931] CPU: 1 PID: 11925 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 211.671837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.681191] Call Trace: [ 211.683786] dump_stack+0x1b2/0x283 [ 211.687419] should_fail.cold+0x10a/0x154 [ 211.691571] should_failslab+0xd6/0x130 [ 211.695547] kmem_cache_alloc_node+0x263/0x410 [ 211.700134] __alloc_skb+0x5c/0x510 [ 211.703763] sk_stream_alloc_skb+0xb1/0x760 [ 211.708083] ? tcp_send_mss+0x9f/0x2e0 [ 211.711973] tcp_sendmsg_locked+0xed8/0x2ef0 [ 211.716389] ? __might_fault+0x177/0x1b0 [ 211.720451] ? _copy_from_user+0x96/0x100 [ 211.724599] ? lock_sock_nested+0x98/0x100 [ 211.728834] ? tcp_sendpage+0x60/0x60 [ 211.732634] ? __local_bh_enable_ip+0xc1/0x170 [ 211.737215] tcp_sendmsg+0x2b/0x40 [ 211.740752] inet_sendmsg+0x11a/0x4e0 [ 211.744546] ? security_socket_sendmsg+0x83/0xb0 [ 211.749297] ? inet_recvmsg+0x4d0/0x4d0 [ 211.753281] sock_sendmsg+0xb5/0x100 [ 211.756995] SyS_sendto+0x1c7/0x2c0 [ 211.760627] ? SyS_getpeername+0x220/0x220 [ 211.764892] ? lock_downgrade+0x740/0x740 [ 211.769050] ? wait_for_completion_io+0x10/0x10 [ 211.773715] ? vfs_write+0x319/0x4d0 [ 211.777428] ? fput+0xb/0x140 [ 211.780530] ? SyS_write+0x14d/0x210 [ 211.784247] ? SyS_read+0x210/0x210 [ 211.787869] ? SyS_clock_settime+0x1a0/0x1a0 [ 211.792275] ? do_syscall_64+0x4c/0x640 [ 211.796243] ? SyS_getpeername+0x220/0x220 [ 211.800478] do_syscall_64+0x1d5/0x640 [ 211.804369] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 211.809551] RIP: 0033:0x45d5b9 08:39:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:33 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@cache_none='cache=none'}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@afid={'afid', 0x3d, 0x2}}]}}) [ 211.812732] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 211.820435] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 211.827701] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 211.834968] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 211.842236] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000000 [ 211.849502] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:33 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 08:39:33 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='9p\x00', 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio='permit_directio'}]}}) 08:39:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x6c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x295}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)={0x0, 0x1, 0x6, @broadcast}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000280)={0xd7c, "d8cf0bf8f21b87a1106743d43ca04742db364c1b94f717317c6ca6ed3f54603b", 0x2, 0x1f, 0x2, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000280)) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b00100000000000b2140e000a0002000000dc2976d153b4", 0x2e}], 0x1}, 0x0) 08:39:33 executing program 3 (fault-call:12 fault-nth:1): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 212.377489] FAULT_INJECTION: forcing a failure. [ 212.377489] name failslab, interval 1, probability 0, space 0, times 0 [ 212.397565] CPU: 1 PID: 11959 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 212.405476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.414838] Call Trace: [ 212.417433] dump_stack+0x1b2/0x283 [ 212.421076] should_fail.cold+0x10a/0x154 [ 212.425225] should_failslab+0xd6/0x130 [ 212.425245] kmem_cache_alloc_node_trace+0x25a/0x400 [ 212.425259] __kmalloc_node_track_caller+0x38/0x70 [ 212.425272] __alloc_skb+0x96/0x510 [ 212.425285] sk_stream_alloc_skb+0xb1/0x760 [ 212.425293] ? tcp_send_mss+0x9f/0x2e0 [ 212.425304] tcp_sendmsg_locked+0xed8/0x2ef0 [ 212.425318] ? __might_fault+0x177/0x1b0 [ 212.425329] ? _copy_from_user+0x96/0x100 [ 212.425341] ? lock_sock_nested+0x98/0x100 [ 212.425352] ? tcp_sendpage+0x60/0x60 [ 212.425366] ? __local_bh_enable_ip+0xc1/0x170 [ 212.425378] tcp_sendmsg+0x2b/0x40 [ 212.425388] inet_sendmsg+0x11a/0x4e0 [ 212.425397] ? security_socket_sendmsg+0x83/0xb0 [ 212.488424] ? inet_recvmsg+0x4d0/0x4d0 [ 212.492404] sock_sendmsg+0xb5/0x100 [ 212.496118] SyS_sendto+0x1c7/0x2c0 [ 212.499739] ? SyS_getpeername+0x220/0x220 [ 212.499753] ? lock_downgrade+0x740/0x740 [ 212.499775] ? wait_for_completion_io+0x10/0x10 [ 212.499785] ? vfs_write+0x319/0x4d0 [ 212.499795] ? fput+0xb/0x140 [ 212.499803] ? SyS_write+0x14d/0x210 [ 212.499812] ? SyS_read+0x210/0x210 [ 212.499822] ? SyS_clock_settime+0x1a0/0x1a0 [ 212.499834] ? do_syscall_64+0x4c/0x640 [ 212.499841] ? SyS_getpeername+0x220/0x220 [ 212.499851] do_syscall_64+0x1d5/0x640 [ 212.499864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 212.499873] RIP: 0033:0x45d5b9 [ 212.499878] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 212.559715] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 212.566984] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 08:39:33 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x6c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x295}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)={0x0, 0x1, 0x6, @broadcast}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000280)={0xd7c, "d8cf0bf8f21b87a1106743d43ca04742db364c1b94f717317c6ca6ed3f54603b", 0x2, 0x1f, 0x2, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r5, 0x8250aea6, &(0x7f0000000280)) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b00100000000000b2140e000a0002000000dc2976d153b4", 0x2e}], 0x1}, 0x0) [ 212.574252] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 212.581521] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000001 [ 212.588792] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:33 executing program 1: pipe(&(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='uid=']) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 08:39:33 executing program 3 (fault-call:12 fault-nth:2): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:33 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/rt_cache\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:33 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) [ 212.848048] FAULT_INJECTION: forcing a failure. [ 212.848048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.868041] autofs4:pid:12000:autofs4_fill_super: called with bogus options [ 212.887031] 9pnet: Insufficient options for proto=fd [ 212.897239] CPU: 1 PID: 11999 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 212.905147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.914501] Call Trace: [ 212.917094] dump_stack+0x1b2/0x283 [ 212.920729] should_fail.cold+0x10a/0x154 [ 212.924883] __alloc_pages_nodemask+0x22c/0x2720 [ 212.929641] ? trace_hardirqs_on+0x10/0x10 [ 212.933880] ? trace_hardirqs_on+0x10/0x10 [ 212.938120] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 212.942966] ? __might_fault+0x104/0x1b0 [ 212.947042] ? lock_acquire+0x170/0x3f0 [ 212.951020] ? lock_downgrade+0x740/0x740 [ 212.955166] ? iov_iter_advance+0x1c9/0xc00 [ 212.959488] alloc_pages_current+0x155/0x260 [ 212.963897] skb_page_frag_refill+0x1bf/0x490 [ 212.968395] ? __phys_addr_symbol+0x1f/0x60 [ 212.972718] sk_page_frag_refill+0x4a/0x1b0 [ 212.977040] tcp_sendmsg_locked+0x789/0x2ef0 [ 212.979876] 9pnet: Insufficient options for proto=fd [ 212.981457] ? lock_sock_nested+0x98/0x100 [ 212.981470] ? tcp_sendpage+0x60/0x60 [ 212.994570] ? __local_bh_enable_ip+0xc1/0x170 [ 212.999189] tcp_sendmsg+0x2b/0x40 [ 213.002730] inet_sendmsg+0x11a/0x4e0 [ 213.006526] ? security_socket_sendmsg+0x83/0xb0 [ 213.011282] ? inet_recvmsg+0x4d0/0x4d0 [ 213.013483] 9pnet: Insufficient options for proto=fd [ 213.015256] sock_sendmsg+0xb5/0x100 [ 213.015267] SyS_sendto+0x1c7/0x2c0 [ 213.015276] ? SyS_getpeername+0x220/0x220 [ 213.015287] ? lock_downgrade+0x740/0x740 [ 213.015306] ? wait_for_completion_io+0x10/0x10 [ 213.015317] ? vfs_write+0x319/0x4d0 [ 213.015325] ? fput+0xb/0x140 [ 213.015332] ? SyS_write+0x14d/0x210 [ 213.015340] ? SyS_read+0x210/0x210 [ 213.015349] ? SyS_clock_settime+0x1a0/0x1a0 [ 213.015359] ? do_syscall_64+0x4c/0x640 [ 213.015369] ? SyS_getpeername+0x220/0x220 [ 213.067586] do_syscall_64+0x1d5/0x640 [ 213.071465] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 213.076648] RIP: 0033:0x45d5b9 [ 213.079877] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 213.087570] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 08:39:34 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RWALK(r0, &(0x7f0000000000)={0x64, 0x6f, 0x1, {0x7, [{0x20, 0x3, 0x1}, {0x2, 0x4, 0x6}, {0x80, 0x4, 0x2}, {0x20, 0x2, 0x3}, {0x80, 0x2, 0x4}, {0xa, 0x1, 0x7}, {0x40, 0x3, 0x8}]}}, 0x64) 08:39:34 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0e29fcffffffffffffffd30ad17b504348bb2c6fecee6079dc0da8542d1a9792df3250dd823e8333b047825ae1884de87c654a755109cddedf5b2ce3"]) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000780)) syz_mount_image$cifs(&(0x7f0000000000)='cifs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x7, &(0x7f0000000580)=[{&(0x7f0000000140), 0x0, 0x3}, {&(0x7f0000000180)="727c1f1923cc8c65ea26d0f4c323a59eac6fef1ad0f1af7647cd0049d9cc8b09150290ac219500bbb823370f2258f4a3c5a5a48b24546bbb8d65d0e3d5c55964e4d58aebc7baab6fd8dd42b2310fac72c9004b8a080cfd7546c9e11dc7cf3de6775d488117", 0x65, 0x100000001}, {&(0x7f0000000200)="6e2cf7757c500de16520bd50bc619e6f661f85872ef5855c7c40fc99dbebc82e078ad07cfe1202df577ecf30a7d6bbc9afff8720f97b9a243a776cbbf84fdef4b93e7488aa011d6bb34f22b44bf97c197b54d8b0413d17bc8eeeb377f886dbe9074ff09bea16c2d74fa8248967d270772b3fe2f0b410f87b2bd304", 0x7b, 0x6}, {&(0x7f0000000340)="74c135bf3c7a0b28b611e39753c408a748b5493e842fa219430b437af058e7fdacfd0125f14098d054dce091fa6b250df0bd51a238077bd80f4d2f4cc861a661c1050832d0927fc7c1e341e76bd78be6df782b53f1070a9e5f768c6b4ad2623c03ec09dc7fae9790c2fe0b9fbda2da29ae26ca1ea84840fae3a0e63adad3cd254bab06f1709871ff9e1ed926f7f81272503e0010e1d35c889fde002c97b2c6b378c7da8b460cad4aced8af700b675d1d1232f9", 0xb3, 0x7}, {&(0x7f0000000280)="9147df8a777e6114e79cf37cdb9d3663f9899d471dab39c91cefb158d493f0fedf948fbe10ec5e0a0ebe37a3ee69b4281298415c97c9380df7994d55a61be27d2ff634e9c58b042a1070bd0b0ae8fe59ccb75b506d85f7651628658ff25a04de4ab4d9", 0x63, 0x6}, {&(0x7f0000000400)="4d9b7ba06bd20f078b2b00c56f54e91e7107d14b87211126a53bf1c724c7a44cec4455c292fc9cccc19bbc2d9ea403d585b8ec856584abc0882e71d7e17bd7f2b9dc021a925a0489330238d4b823052da90b1481b692f2cec3624087999e409a0f57be87c7e3e9c00666dce328dc58278771542a23d62efc7eeb9bd818f5ca25644d8eeaed70c2d5f1f016ab8803b2a146f27b8528108ae07fb7d9271e5dbd023557262df8a58059", 0xa8, 0x1}, {&(0x7f00000004c0)="fe8753a9468e5a0f7c040b731520b5192ad1177891e3ad5f7e04f6dd96738dff941bb4e4eb039014dac749e76745361ff979a4d4764c8a54ebc0e4e84cabfea5aa95f78377a4f6a9abac148fe20ea166339319df150e4fd8c7cd54d47fd6b8fd3265dc8a2f176459ebf1927bf0615a6bacf6c0aff5d5eff4829dd17bd4b7d9d79cc7181759387ceec567dd4e30eed4633f4f90e1a397", 0x96, 0x7f}], 0x820000, &(0x7f0000000640)='/dev/swradio#\x00') 08:39:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x8, 0x0, 0x4, 0x3, 0x7, 0x1, 0xb3dd, 0x7fff, 0x3, 0x2, 0x6faf, 0x1, 0xffffffffffffff01, 0x2, 0xb568]}, &(0x7f0000000180)=0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1d6d079c4d4f58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be266e31a8021e00b00004e080addde36e5fdc6c42a7b3f912f6906a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6a884473845404b04bf97c4fea679c032b363956cd8bac9626bcc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7399423f84c6fa5f9be8173a9639a79fae885d05afe002c0e7821d406c967379e7521292d24d6c8034e2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d737acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23eea1853f5cd830e2d8a49fc8f4b9276e9dc330c9cb7fca701fcb947d6017ad573c4772ad790af752e648048c31bc604324f59511722a6cd9bbb2cf727a8f5dd89315b8c8650a708f2bba30ad7804fa4140f1a754b7d3f510ee687ae5006619dfb3a37d897662bee00189f43da46ba3079f869d1ea172908a231c84cbad3365d1d2f2ef93a6a70c8b8ece0e243eab7fa34ab0a7e7e497065e5e282e8852a243d528075214af000000000070d42182d8f3a347d48289865f75331d888c72df1da4b290582f94064227f03204add786a87b23ceb17c25710e769fe2d6a7bd8e504801e747715550f843b66b1a8c7b36194ba9c8f64ac0c9b18d8c1b9e1a736825c91bb61cfee23359c117f78a36f114868ccfe32cebfd72103a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf44"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000633277", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 213.094826] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 213.102087] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 213.109334] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000002 [ 213.116587] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:34 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000140)) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:34 executing program 3 (fault-call:12 fault-nth:3): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 213.173437] 9pnet: Insufficient options for proto=fd [ 213.204272] FAULT_INJECTION: forcing a failure. [ 213.204272] name failslab, interval 1, probability 0, space 0, times 0 [ 213.231313] CPU: 0 PID: 12032 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 213.239408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.248772] Call Trace: [ 213.251364] dump_stack+0x1b2/0x283 [ 213.255003] should_fail.cold+0x10a/0x154 [ 213.259158] should_failslab+0xd6/0x130 [ 213.263132] kmem_cache_alloc_node+0x263/0x410 [ 213.267723] __alloc_skb+0x5c/0x510 [ 213.271353] sk_stream_alloc_skb+0xb1/0x760 [ 213.275704] tcp_fragment+0x253/0x1480 [ 213.279595] tcp_write_xmit+0xf60/0x4e10 [ 213.283663] ? _copy_from_iter_full+0x1c9/0x690 [ 213.288333] ? __phys_addr_symbol+0x1f/0x60 [ 213.292653] ? __check_object_size+0x179/0x22c [ 213.297229] ? __sk_mem_schedule+0x99/0xd0 [ 213.301464] tcp_sendmsg_locked+0x14e6/0x2ef0 [ 213.305971] ? tcp_sendpage+0x60/0x60 [ 213.309763] ? __local_bh_enable_ip+0xc1/0x170 [ 213.314329] tcp_sendmsg+0x2b/0x40 [ 213.317868] inet_sendmsg+0x11a/0x4e0 [ 213.321667] ? security_socket_sendmsg+0x83/0xb0 [ 213.326421] ? inet_recvmsg+0x4d0/0x4d0 [ 213.330401] sock_sendmsg+0xb5/0x100 [ 213.334462] SyS_sendto+0x1c7/0x2c0 [ 213.335158] 9pnet: Insufficient options for proto=fd [ 213.338082] ? SyS_getpeername+0x220/0x220 [ 213.338094] ? lock_downgrade+0x740/0x740 [ 213.338112] ? wait_for_completion_io+0x10/0x10 [ 213.356204] ? vfs_write+0x319/0x4d0 [ 213.359920] ? fput+0xb/0x140 [ 213.363028] ? SyS_write+0x14d/0x210 [ 213.366740] ? SyS_read+0x210/0x210 [ 213.370366] ? SyS_clock_settime+0x1a0/0x1a0 [ 213.374776] ? do_syscall_64+0x4c/0x640 [ 213.378741] ? SyS_getpeername+0x220/0x220 [ 213.382963] do_syscall_64+0x1d5/0x640 [ 213.386846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 213.392028] RIP: 0033:0x45d5b9 [ 213.395207] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 08:39:34 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$setpipe(r0, 0x407, 0xef6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB='(\x00']) [ 213.402905] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 213.410338] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 213.417596] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 213.424852] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000003 [ 213.432106] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c [ 213.470511] 9pnet: Insufficient options for proto=fd 08:39:34 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000240)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=none,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',noextend,cache=loose,version=9p2000,version=9p2000,obj_role=trans=fd,,fowner>', @ANYRESDEC=r3, @ANYBLOB=',uid<', @ANYRESDEC=0xee01, @ANYBLOB="28e50000bf883d645f39d0760174aac32c006b98f3092277eb22761e9364fff211ef96b91d462a498c178c8832b9cce74775325910ef5e381d4d26c24d9280d71b4b8557584195cfd151e6273ff4f79122ecd0b62313e91b855266dedf7ec555622f05fa907d726ce85d6474b4c0897a92e8ba3f49000000000000"]) write$P9_RWSTAT(r1, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) connect$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x878c, 0x2, [0x4, 0x401]}, &(0x7f0000000200)=0xc) 08:39:34 executing program 3 (fault-call:12 fault-nth:4): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x8, 0x0, 0x4, 0x3, 0x7, 0x1, 0xb3dd, 0x7fff, 0x3, 0x2, 0x6faf, 0x1, 0xffffffffffffff01, 0x2, 0xb568]}, &(0x7f0000000180)=0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000633277", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 213.545974] FAULT_INJECTION: forcing a failure. [ 213.545974] name failslab, interval 1, probability 0, space 0, times 0 [ 213.583824] CPU: 0 PID: 12052 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 213.591743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.601085] Call Trace: [ 213.603660] dump_stack+0x1b2/0x283 [ 213.607271] should_fail.cold+0x10a/0x154 [ 213.611402] should_failslab+0xd6/0x130 [ 213.615360] kmem_cache_alloc_node_trace+0x25a/0x400 [ 213.620445] __kmalloc_node_track_caller+0x38/0x70 [ 213.625373] __alloc_skb+0x96/0x510 [ 213.628996] sk_stream_alloc_skb+0xb1/0x760 [ 213.633311] tcp_fragment+0x253/0x1480 [ 213.637188] tcp_write_xmit+0xf60/0x4e10 [ 213.641239] ? _copy_from_iter_full+0x1c9/0x690 [ 213.645889] ? __phys_addr_symbol+0x1f/0x60 [ 213.650190] ? __check_object_size+0x179/0x22c [ 213.654751] ? __sk_mem_schedule+0x99/0xd0 [ 213.658969] tcp_sendmsg_locked+0x14e6/0x2ef0 [ 213.663453] ? tcp_sendpage+0x60/0x60 [ 213.667252] ? __local_bh_enable_ip+0xc1/0x170 [ 213.671816] tcp_sendmsg+0x2b/0x40 [ 213.675338] inet_sendmsg+0x11a/0x4e0 [ 213.679117] ? security_socket_sendmsg+0x83/0xb0 [ 213.683854] ? inet_recvmsg+0x4d0/0x4d0 [ 213.687814] sock_sendmsg+0xb5/0x100 [ 213.691509] SyS_sendto+0x1c7/0x2c0 [ 213.695116] ? SyS_getpeername+0x220/0x220 [ 213.699332] ? lock_downgrade+0x740/0x740 [ 213.703483] ? wait_for_completion_io+0x10/0x10 [ 213.708129] ? vfs_write+0x319/0x4d0 [ 213.711823] ? fput+0xb/0x140 [ 213.714915] ? SyS_write+0x14d/0x210 [ 213.718607] ? SyS_read+0x210/0x210 [ 213.722212] ? SyS_clock_settime+0x1a0/0x1a0 [ 213.726600] ? do_syscall_64+0x4c/0x640 [ 213.730551] ? SyS_getpeername+0x220/0x220 [ 213.734764] do_syscall_64+0x1d5/0x640 [ 213.738631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 213.743799] RIP: 0033:0x45d5b9 08:39:34 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) [ 213.747066] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 213.754752] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 213.762016] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 213.769264] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 213.776526] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000004 [ 213.783792] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x8, 0x0, 0x4, 0x3, 0x7, 0x1, 0xb3dd, 0x7fff, 0x3, 0x2, 0x6faf, 0x1, 0xffffffffffffff01, 0x2, 0xb568]}, &(0x7f0000000180)=0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f00800e0ffffff00004000633277", 0x0, 0x100, 0x6000000000000000}, 0x28) 08:39:34 executing program 3 (fault-call:12 fault-nth:5): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 213.913310] FAULT_INJECTION: forcing a failure. [ 213.913310] name failslab, interval 1, probability 0, space 0, times 0 [ 213.954992] CPU: 0 PID: 12068 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 213.962905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.972262] Call Trace: [ 213.974855] dump_stack+0x1b2/0x283 [ 213.978488] should_fail.cold+0x10a/0x154 [ 213.982637] should_failslab+0xd6/0x130 [ 213.986610] kmem_cache_alloc_node+0x54/0x410 [ 213.991125] __alloc_skb+0x5c/0x510 [ 213.994755] sk_stream_alloc_skb+0xb1/0x760 [ 213.999082] ? check_preemption_disabled+0x35/0x240 [ 214.004103] tcp_fragment+0x253/0x1480 [ 214.007995] tcp_write_xmit+0xf60/0x4e10 [ 214.012072] __tcp_push_pending_frames+0xa0/0x230 [ 214.016914] tcp_sendmsg_locked+0x23ca/0x2ef0 [ 214.021424] ? tcp_sendpage+0x60/0x60 [ 214.025229] ? __local_bh_enable_ip+0xc1/0x170 [ 214.029811] tcp_sendmsg+0x2b/0x40 [ 214.033350] inet_sendmsg+0x11a/0x4e0 [ 214.037147] ? security_socket_sendmsg+0x83/0xb0 [ 214.041900] ? inet_recvmsg+0x4d0/0x4d0 [ 214.045874] sock_sendmsg+0xb5/0x100 [ 214.049731] SyS_sendto+0x1c7/0x2c0 [ 214.053365] ? SyS_getpeername+0x220/0x220 [ 214.058029] ? lock_downgrade+0x740/0x740 [ 214.062224] ? wait_for_completion_io+0x10/0x10 [ 214.066918] ? vfs_write+0x319/0x4d0 [ 214.070616] ? fput+0xb/0x140 [ 214.073745] ? SyS_write+0x14d/0x210 [ 214.077442] ? SyS_read+0x210/0x210 [ 214.081097] ? SyS_clock_settime+0x1a0/0x1a0 [ 214.086532] ? do_syscall_64+0x4c/0x640 [ 214.090484] ? SyS_getpeername+0x220/0x220 [ 214.094701] do_syscall_64+0x1d5/0x640 [ 214.098618] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 214.103785] RIP: 0033:0x45d5b9 [ 214.106952] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 214.114638] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 214.121885] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 214.129141] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 214.136430] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000005 [ 214.143720] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:35 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) pipe(&(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:35 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @descriptor="b937624174465811"}}) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:35 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000008bbb065763908641095e3be982f81b00fe8800000078fd392cce9e4887000001fe8000000000000000000000000000aaa9a96bcf53deee3f46829fbe3487395f4eecea805bf089f4ca849c5fe4dc76bc5278688f616db3c85f3c7e0fb8f0e537dae4d69de00e65352aea59783e7f2ee21a3f2299a46684248796dfca235be1281e4b68bc"], 0x0) 08:39:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffffffff0000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000240)) 08:39:35 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) r3 = socket$isdn(0x22, 0x3, 0x3) r4 = getpgrp(0xffffffffffffffff) sendmsg$unix(r2, &(0x7f00000008c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000001c0)="caf4af1c23ca920d33ab1f7bfe541e896111d1052ad4471f25f1c8a648bb45d76a03b44d91be9a949031a3e302fec8815fb5502d8019b20062c9fcf38fa160a2e3c96c3219fa48bbad0ffd90a955c42ceb59913b4978cff18ca86514614d", 0x5e}, {&(0x7f0000000240)="57082318a69f4908733c9e008160378b6f0d7b2802475cfebeb8f60c5e7e6e3d844a70f02679815c3fe3382b0ab09d297770e2fb492025c6e068e713c1d95d6808d3300fc550b0d6119f2cc6973a01abe50d049c338009342db90ea906e7bc5772a15f69a541d396ea3512ae4d05dcefd512b9d23559acf3934d54b573c55593f61c7ae5f77a908809d386af2c2124acdb9b3e0345de75d8374c09ab49d15d", 0x9f}, {&(0x7f0000000340)="02a663d587e06afb76c56c7db351b960244d7e944350225f1c214a86aa0a865132bb90f55e6ae4d4d7832f1d97f957032a66fea753a73ec8e99ba94a1b3ed6bda05fac8556331f65ca6fc2e2e20a1e02ec05156730d4a71429f785354dbdda24455836ee762edd5216ab7928b5faf8815a2ef30dc15a9178f396afba7731d14fda37aaa2c1715e83070828c3ca4a04a17b5920c41f1c32bd70409074526c28914e3bb5c9bc9543be5f60fbf1745bfab0823dec42bc85515860248a99aeae2a3c04c58dee5831f1fe34bd67034b80", 0xce}, {&(0x7f0000000440)="9226fee0812f5e16e805b101f33afffa1e2bd1a2929d93943e8e4144dd2f7e631ad3e3b5d8d50a80be80b9728bb199b9e90d4d9b840f3d96d8969a42a08108a754e98e7fa4d2253da8f066829275a3ff2bb8cea82811fdfbae522077cad828161271e2e48f84a98b5323e2c4fa7d09e4018100bd729cac4592019aee983904ee2bffb165d0e918ac2f", 0x89}, {&(0x7f0000000500)="d6ba3b26b797229bdbf322137d160e965f8fe04e19a0551467f6839ad1f15193b9af451318c8879ef2fe757bf25e31192c82ffcff3e9aa048a6e5212a868caa693b637bb75a1db712f1ac367c605bc60abfd64dac70aa75665fb571fadbfb790cc641dc828dd364a2fc2ef59e285c2251ebca565060ce9ec17eae70b923bd541d0cb8de6b00ca85b2064678a2199a3db78631cfa443e509883fb84a75518eba94cb15f8d296a84bac77801d0", 0xac}, {&(0x7f00000005c0)="645898b636ed6a1781c83d1de69cc052f2b542e1714c96bd2569d9e4d48aaecc5557a52e75348464c23b7566b36f74a8b46de6520e0d8c016bed630b58b774478f9f96bb0c29e0f6d8f4bfa5588f645e33bc673baa52008692d0cb60de19acc5716637de88a44cdb73be3a10445d04c0191cb0c29bde0efec0f83ccd07caef884aea", 0x82}, {&(0x7f0000000680)="12c01c2fddbbe710243c7a6fefea225e7c7840de23f039c2d48a4ad5c596a33cd0ddd1af184343baecfc537a3ad042bc10b681d534b7110399d674b2884dbf4cbb369e90dba7b586089cfdf4f76d96dd0fa8cd5b4b9af2ef3455051f467247e607742cc58eded5a81a95eb0f030ab158b00efbe6db415be5a3468d47a3fd339d7a6b260a0b20d9265bb1a7308e959d7bc3dbc34972c771da4da00cd30fabcc74984a773e54c8efcdda3cafbf", 0xac}, {&(0x7f0000000780)="4da00527f760cf0aa441b0b986e3ec4a6ce2f042da40f8e3c9d971e7d241384fa51a767b7ae831557eef2aa6ffb5c50e8f94e1802b64f50909ce7f2e58e60936094073f40385bb36bf967e7c8af245c6d40cc1f38e44a2c8212aadb383c8f4a1db2d127d8ecb89017a12bf2b13a9f4d94e5d2ddd11c73c9c68d4f537208f00bd5ad4f379ada33b56c1d1fb92b20a1a1f5c5c66cae8ccb752e3f4ea6a2d61ce61", 0xa0}], 0x8, &(0x7f0000000040)=[@rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xffffffffffffffff}}}], 0x40, 0x20000840}, 0x34008000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:35 executing program 3 (fault-call:12 fault-nth:6): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 214.257000] FAULT_INJECTION: forcing a failure. [ 214.257000] name failslab, interval 1, probability 0, space 0, times 0 [ 214.292745] CPU: 0 PID: 12088 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 214.300656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.310004] Call Trace: [ 214.312586] dump_stack+0x1b2/0x283 [ 214.316211] should_fail.cold+0x10a/0x154 [ 214.320355] should_failslab+0xd6/0x130 [ 214.324319] kmem_cache_alloc_node_trace+0x58/0x400 [ 214.329333] __kmalloc_node_track_caller+0x38/0x70 [ 214.334251] __alloc_skb+0x96/0x510 [ 214.337869] sk_stream_alloc_skb+0xb1/0x760 [ 214.342197] ? check_preemption_disabled+0x35/0x240 [ 214.347203] tcp_fragment+0x253/0x1480 [ 214.351086] tcp_write_xmit+0xf60/0x4e10 [ 214.355149] __tcp_push_pending_frames+0xa0/0x230 [ 214.359982] tcp_sendmsg_locked+0x23ca/0x2ef0 [ 214.364567] ? tcp_sendpage+0x60/0x60 [ 214.368362] ? __local_bh_enable_ip+0xc1/0x170 [ 214.373042] tcp_sendmsg+0x2b/0x40 [ 214.376571] inet_sendmsg+0x11a/0x4e0 [ 214.380358] ? security_socket_sendmsg+0x83/0xb0 [ 214.385099] ? inet_recvmsg+0x4d0/0x4d0 [ 214.389064] sock_sendmsg+0xb5/0x100 [ 214.392766] SyS_sendto+0x1c7/0x2c0 [ 214.396383] ? SyS_getpeername+0x220/0x220 [ 214.400609] ? lock_downgrade+0x740/0x740 [ 214.404865] ? wait_for_completion_io+0x10/0x10 [ 214.409521] ? vfs_write+0x319/0x4d0 [ 214.413221] ? fput+0xb/0x140 [ 214.416313] ? SyS_write+0x14d/0x210 [ 214.420018] ? SyS_read+0x210/0x210 [ 214.423630] ? SyS_clock_settime+0x1a0/0x1a0 [ 214.428026] ? do_syscall_64+0x4c/0x640 [ 214.431992] ? SyS_getpeername+0x220/0x220 [ 214.436217] do_syscall_64+0x1d5/0x640 [ 214.440096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 214.445270] RIP: 0033:0x45d5b9 [ 214.448445] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 214.456140] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 214.463396] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 214.470656] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 214.477908] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000006 [ 214.485268] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:35 executing program 3 (fault-call:12 fault-nth:7): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:35 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xaf201b0142547d4b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000a01000000000000000000010000000900010073797a30000000000900020073797a3200000000140000001000010000000000000000000000000a000000"], 0x74}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80000002000030a2, 0x800007f}, r3, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) [ 214.647109] FAULT_INJECTION: forcing a failure. [ 214.647109] name failslab, interval 1, probability 0, space 0, times 0 [ 214.659733] CPU: 0 PID: 12108 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 214.667630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.676993] Call Trace: [ 214.679571] dump_stack+0x1b2/0x283 [ 214.683190] should_fail.cold+0x10a/0x154 [ 214.687328] should_failslab+0xd6/0x130 [ 214.691411] kmem_cache_alloc_node+0x54/0x410 [ 214.695895] __alloc_skb+0x5c/0x510 [ 214.699514] __tcp_send_ack.part.0+0x67/0x580 [ 214.703992] tcp_send_ack+0x6f/0x90 [ 214.707689] __tcp_ack_snd_check+0xf6/0x380 [ 214.712001] tcp_rcv_established+0x76c/0x17a0 [ 214.716529] ? tcp_data_queue+0x3ac0/0x3ac0 [ 214.720836] tcp_v4_do_rcv+0x541/0x7d0 [ 214.724712] __release_sock+0x12a/0x350 [ 214.728673] release_sock+0x54/0x1b0 [ 214.732374] sk_stream_wait_memory+0x492/0xd20 [ 214.737039] ? sk_stream_wait_connect+0x530/0x530 [ 214.741904] ? __tcp_push_pending_frames+0xa0/0x230 [ 214.746900] ? do_wait_intr_irq+0x270/0x270 [ 214.751214] tcp_sendmsg_locked+0x1179/0x2ef0 [ 214.755714] ? tcp_sendpage+0x60/0x60 [ 214.759498] ? __local_bh_enable_ip+0xc1/0x170 [ 214.764062] tcp_sendmsg+0x2b/0x40 [ 214.767581] inet_sendmsg+0x11a/0x4e0 [ 214.771361] ? security_socket_sendmsg+0x83/0xb0 [ 214.776093] ? inet_recvmsg+0x4d0/0x4d0 [ 214.780054] sock_sendmsg+0xb5/0x100 [ 214.783775] SyS_sendto+0x1c7/0x2c0 [ 214.787380] ? SyS_getpeername+0x220/0x220 [ 214.791593] ? lock_downgrade+0x740/0x740 [ 214.795726] ? wait_for_completion_io+0x10/0x10 [ 214.800376] ? vfs_write+0x319/0x4d0 [ 214.804066] ? fput+0xb/0x140 [ 214.807149] ? SyS_write+0x14d/0x210 [ 214.810842] ? SyS_read+0x210/0x210 [ 214.814454] ? SyS_clock_settime+0x1a0/0x1a0 [ 214.818848] ? do_syscall_64+0x4c/0x640 [ 214.822806] ? SyS_getpeername+0x220/0x220 [ 214.827022] do_syscall_64+0x1d5/0x640 [ 214.830891] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 214.836058] RIP: 0033:0x45d5b9 [ 214.839273] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 08:39:36 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:39:36 executing program 3 (fault-call:12 fault-nth:8): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 214.846960] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 214.854211] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 214.861459] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 214.868751] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000007 [ 214.876025] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c [ 214.951180] audit: type=1800 audit(1599813576.069:26): pid=12117 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16038 res=0 [ 214.984001] FAULT_INJECTION: forcing a failure. [ 214.984001] name failslab, interval 1, probability 0, space 0, times 0 [ 214.994189] audit: type=1400 audit(1599813576.099:27): avc: denied { set_context_mgr } for pid=12113 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 [ 215.020687] CPU: 0 PID: 12118 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 215.028584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.037936] Call Trace: [ 215.040524] dump_stack+0x1b2/0x283 [ 215.044171] should_fail.cold+0x10a/0x154 [ 215.048335] should_failslab+0xd6/0x130 [ 215.052317] kmem_cache_alloc_node_trace+0x58/0x400 [ 215.057341] __kmalloc_node_track_caller+0x38/0x70 [ 215.062271] __alloc_skb+0x96/0x510 [ 215.065903] __tcp_send_ack.part.0+0x67/0x580 [ 215.070410] tcp_send_ack+0x6f/0x90 [ 215.074017] __tcp_ack_snd_check+0xf6/0x380 [ 215.078363] tcp_rcv_established+0x76c/0x17a0 [ 215.082848] ? tcp_data_queue+0x3ac0/0x3ac0 [ 215.087167] tcp_v4_do_rcv+0x541/0x7d0 [ 215.091072] __release_sock+0x12a/0x350 [ 215.095038] release_sock+0x54/0x1b0 08:39:36 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80000) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x3e, 0x34, 0x34, 0xc53b4fabf373fb1d, 0x62, 0x62, 0x31, 0x35], 0x2d, [0x39, 0x32, 0x39], 0x2d, [0x37, 0x37, 0x33, 0x30], 0x2d, [0x65, 0x34, 0x37, 0x38], 0x2d, [0x62, 0x39, 0x36, 0x34, 0x66, 0x38, 0x64, 0x39]}}}]}}) [ 215.098750] sk_stream_wait_memory+0x492/0xd20 [ 215.103351] ? sk_stream_wait_connect+0x530/0x530 [ 215.108302] ? __tcp_push_pending_frames+0xa0/0x230 [ 215.113314] ? do_wait_intr_irq+0x270/0x270 [ 215.117639] tcp_sendmsg_locked+0x1179/0x2ef0 [ 215.122151] ? tcp_sendpage+0x60/0x60 [ 215.125957] ? __local_bh_enable_ip+0xc1/0x170 [ 215.130542] tcp_sendmsg+0x2b/0x40 [ 215.134066] inet_sendmsg+0x11a/0x4e0 [ 215.137845] ? security_socket_sendmsg+0x83/0xb0 [ 215.142578] ? inet_recvmsg+0x4d0/0x4d0 [ 215.146553] sock_sendmsg+0xb5/0x100 [ 215.150242] SyS_sendto+0x1c7/0x2c0 [ 215.153844] ? SyS_getpeername+0x220/0x220 [ 215.158076] ? lock_downgrade+0x740/0x740 [ 215.162209] ? wait_for_completion_io+0x10/0x10 [ 215.166859] ? vfs_write+0x319/0x4d0 [ 215.170549] ? fput+0xb/0x140 [ 215.173637] ? SyS_write+0x14d/0x210 [ 215.177340] ? SyS_read+0x210/0x210 [ 215.180979] ? SyS_clock_settime+0x1a0/0x1a0 [ 215.185372] ? do_syscall_64+0x4c/0x640 [ 215.189329] ? SyS_getpeername+0x220/0x220 [ 215.193543] do_syscall_64+0x1d5/0x640 08:39:36 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xaf201b0142547d4b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000a01000000000000000000010000000900010073797a30000000000900020073797a3200000000140000001000010000000000000000000000000a000000"], 0x74}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80000002000030a2, 0x800007f}, r3, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) [ 215.197424] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 215.202596] RIP: 0033:0x45d5b9 [ 215.205769] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 215.213472] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 215.220831] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 215.228084] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 215.235335] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000008 [ 215.242587] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read$dsp(r2, &(0x7f00000001c0)=""/85, 0x55) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:36 executing program 3 (fault-call:12 fault-nth:9): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 215.311814] audit: type=1800 audit(1599813576.429:28): pid=12140 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16044 res=0 [ 215.350735] binder: BINDER_SET_CONTEXT_MGR already set 08:39:36 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="095242c8fbc35bd53f6bf76f3c1032f844b80517f13f421c5c4196375a255206ea0449ca94b79ad486fe157e6b8ea5352f79eb6ea5333f32ea714454d4610e2ce0f250fb8095723d53198401cabc24ea724d71e290de71f2e87ae59f2b4ee4c0aedd271ab61499679d586e8862a6af6737e7b47fb4c69114af62ccb5fe6b5b27c3259abf1dd37d3554eb3b7a73983172b14c766147e45faaa6149955b9020798d14803608225a2d4c12f7a", 0xab}, {&(0x7f0000000200)="5a92ff9e220c3197005130684f24f52fe42d9918f337fadf190c5fa76b0d8192184192fd82818157a912ce338412094d56091375264a08591c43274fe68399f1ad06347579646ca6528c1b32d40401f387d679ec4ecb19a64a75fd036be0f4dffd70b6292b6924ad6a8c64d409733318d37b6b0c29e065924c152b070d0bcfa59c915ab2f416a4d1665a64dc9e631f70b59d95fe8390b056ecc5", 0x9a}, {&(0x7f0000000340)="b136c4a3e86cd9d519d5f17d457e8c692a1b41389ed3a4a2f0d1ba8571a7ad8875330ccf0f25a4e630e93542f14ea68e77c9d59ab3ecf21d731633421c06f529a1c2bf5ee96c66edbbeacb8700fd498c16a88516bf3e3b4ef074061073539aede7b3e7e0185f0de56b34775cc364c1ecd48ef11307363af5e4dd2d2ab35c4a87ab805cf9cdf9506ad72be54a476e2d084323c567a9d0e3212a67bc0ed389c5700ed9c3faaed3b123c1a20756b51aa57ca30c7cd708e585ba1412439b", 0xbc}], 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="7c9141a697a3bb", @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 215.367726] binder: 12137:12140 ioctl 40046207 0 returned -16 08:39:36 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000140)=0x78) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000240)) r4 = socket$netlink(0x10, 0x3, 0x5639876fb8ee2f01) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x42c, 0x3f3, 0x100, 0x70bd2a, 0x25dfdbfb, {0x4, 0x1, 0xd, [0x10000, 0xfffffff8, 0x4, 0x3, 0x50bfee8c, 0x6, 0x800, 0x400, 0x203c, 0x6, 0x0, 0xba, 0x4, 0x4b5, 0x6, 0x8, 0xfffffffa, 0xe9a4, 0x925, 0x400, 0x3, 0x6, 0x7, 0x6, 0xe03, 0x3, 0x6f, 0x4, 0x5, 0x2, 0x0, 0x8, 0x7fffffff, 0x7, 0x3, 0x1000000, 0x3, 0xa253, 0xde8, 0x10001, 0x7, 0xfff, 0x80000001, 0x0, 0x101, 0x7, 0x9a, 0x3000000, 0x4000000, 0x7, 0x4800, 0x200, 0x2, 0x1, 0x6, 0xb9f, 0x1, 0xfffffffc, 0x9, 0x4, 0xf99a, 0xffff, 0x3, 0x800], [0x3f, 0x2b53, 0x5, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3f, 0x2, 0x80000001, 0x10001, 0x0, 0x1000, 0x4, 0x0, 0x6000000, 0xdd, 0x6, 0xacb, 0x8001, 0x8, 0x1, 0xd4, 0x0, 0x1, 0x4, 0xad8, 0x6, 0x73ee822a, 0x9, 0x1f, 0x80000000, 0xfffffffd, 0x40, 0x5, 0x2, 0x6, 0x3f, 0x6, 0x1ee, 0x0, 0x0, 0xffffffff, 0x4, 0x7, 0x9, 0x1, 0x8, 0x8, 0xfffffff7, 0x6, 0x1, 0x7, 0x7, 0x6, 0x3, 0xf229, 0x5, 0x2, 0x401, 0x1, 0x8, 0xfffffc01], [0x2, 0x10001, 0x5, 0x3, 0x0, 0xfff, 0x1, 0x4, 0xfffffff9, 0x200, 0x1, 0x672, 0x9, 0x10001, 0x0, 0x4, 0x6, 0x200, 0x3, 0x7fffffff, 0x6, 0x40, 0x5f, 0x3, 0xa3, 0x3, 0x3, 0x7, 0x6, 0x9, 0x9, 0x5, 0x1, 0x7, 0x2, 0x6e62, 0x74d4, 0x80000000, 0xca4, 0x8000, 0x200, 0x5, 0x99, 0x2, 0x8, 0x9, 0x7b, 0x5, 0x8, 0x2, 0x7, 0x8, 0x3, 0x401, 0x9, 0x1, 0x7ff, 0x6, 0x0, 0x7ff, 0x0, 0x101, 0x42d], [0x2, 0x2, 0xe8fc, 0xce, 0x0, 0x4ff98000, 0x7, 0x4, 0x8001, 0xffff, 0x40, 0x1ff, 0x1, 0x2, 0x9, 0x8, 0x5, 0x86, 0x1ff, 0x1f, 0x4, 0x9, 0xc4c, 0xca1, 0xa9b7, 0x5, 0xffff1032, 0xefe9, 0x0, 0x7, 0xff, 0x0, 0x8, 0x100, 0xfec9, 0x1ff, 0x2, 0x800, 0xffffffff, 0x10001, 0x10001, 0x1b3, 0x71360, 0x2, 0x9, 0x3ff, 0x7, 0x2, 0x8, 0xfffff001, 0x4, 0xffffffff, 0x9, 0xffff68a7, 0x3, 0x64, 0x4, 0x8, 0x3, 0x8, 0xffff, 0x9, 0x0, 0x20], 0x9, ['trans=fd,']}, ["", ""]}, 0x42c}}, 0x20000000) [ 215.420686] 9pnet: Insufficient options for proto=fd [ 215.432223] FAULT_INJECTION: forcing a failure. [ 215.432223] name failslab, interval 1, probability 0, space 0, times 0 [ 215.461693] syz-executor.0 (12140) used greatest stack depth: 24072 bytes left [ 215.472777] CPU: 0 PID: 12147 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 215.480671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.490023] Call Trace: [ 215.492614] dump_stack+0x1b2/0x283 [ 215.496248] should_fail.cold+0x10a/0x154 [ 215.500398] should_failslab+0xd6/0x130 [ 215.504375] kmem_cache_alloc_node+0x54/0x410 08:39:36 executing program 0: socketpair(0x2b, 0x1, 0x4, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e04, @rand_addr=0x64010102}, {0x1}, 0x20, {0x2, 0x4e24, @loopback}}) r1 = msgget(0x1, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x1000) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000900000f5f394018a64431e98f8c603f0664d2e88047421c4fbf27c28a4ec03468c28c49be44f13e79664f08186ec4ac345c1aa23851eefdad38ed96a983859a6632c5f5428d465ac122d07f6e50aa1c8392f135b75b4bb10a0dc30d34f59dc212d641997e8972d2a679b9b06679e8280093786b4f326277589cecb4efc0b26fab45628d29631437515cee77e80e353d9207921499f168578b7a0609ee119d135d1f5fe0ee874a0ba4e24fa2892a414d39d89fa57b8d91a74c5cc9b9dccadb13b47bb858fbaf6a2fc1624971cfc618a297b240649ce31edbd200"/238], 0xa3, 0x800) [ 215.508874] __alloc_skb+0x5c/0x510 [ 215.512505] __tcp_send_ack.part.0+0x67/0x580 [ 215.517003] tcp_send_ack+0x6f/0x90 [ 215.520629] __tcp_ack_snd_check+0xf6/0x380 [ 215.524952] tcp_rcv_established+0x76c/0x17a0 [ 215.529448] ? tcp_data_queue+0x3ac0/0x3ac0 [ 215.533771] tcp_v4_do_rcv+0x541/0x7d0 [ 215.537663] __release_sock+0x12a/0x350 [ 215.541641] release_sock+0x54/0x1b0 [ 215.545361] sk_stream_wait_memory+0x492/0xd20 [ 215.549956] ? sk_stream_wait_connect+0x530/0x530 [ 215.554798] ? __tcp_push_pending_frames+0xa0/0x230 08:39:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000080)) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000000)={{0x0, 0x3, 0x34, 0x1, 0x432c}, 0x84, 0x3}) [ 215.559811] ? do_wait_intr_irq+0x270/0x270 [ 215.564139] tcp_sendmsg_locked+0x1179/0x2ef0 [ 215.568651] ? tcp_sendpage+0x60/0x60 [ 215.572456] ? __local_bh_enable_ip+0xc1/0x170 [ 215.577041] tcp_sendmsg+0x2b/0x40 [ 215.580581] inet_sendmsg+0x11a/0x4e0 [ 215.584384] ? security_socket_sendmsg+0x83/0xb0 [ 215.589140] ? inet_recvmsg+0x4d0/0x4d0 [ 215.593120] sock_sendmsg+0xb5/0x100 [ 215.596840] SyS_sendto+0x1c7/0x2c0 [ 215.600465] ? SyS_getpeername+0x220/0x220 [ 215.604700] ? lock_downgrade+0x740/0x740 [ 215.608859] ? wait_for_completion_io+0x10/0x10 [ 215.613528] ? vfs_write+0x319/0x4d0 [ 215.617245] ? fput+0xb/0x140 [ 215.620347] ? SyS_write+0x14d/0x210 [ 215.624046] ? SyS_read+0x210/0x210 [ 215.627664] ? SyS_clock_settime+0x1a0/0x1a0 [ 215.632062] ? do_syscall_64+0x4c/0x640 [ 215.636020] ? SyS_getpeername+0x220/0x220 [ 215.640249] do_syscall_64+0x1d5/0x640 [ 215.644128] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 215.649297] RIP: 0033:0x45d5b9 [ 215.652462] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 08:39:36 executing program 3 (fault-call:12 fault-nth:10): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 215.660148] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 215.667406] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 215.674665] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 215.681959] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000009 [ 215.689350] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:36 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) [ 215.771274] FAULT_INJECTION: forcing a failure. [ 215.771274] name failslab, interval 1, probability 0, space 0, times 0 [ 215.786100] CPU: 0 PID: 12172 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 215.794006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.803357] Call Trace: [ 215.805948] dump_stack+0x1b2/0x283 [ 215.809581] should_fail.cold+0x10a/0x154 [ 215.813731] should_failslab+0xd6/0x130 [ 215.817706] kmem_cache_alloc_node_trace+0x58/0x400 [ 215.822731] __kmalloc_node_track_caller+0x38/0x70 [ 215.827663] __alloc_skb+0x96/0x510 [ 215.831393] __tcp_send_ack.part.0+0x67/0x580 [ 215.835897] tcp_send_ack+0x6f/0x90 [ 215.839523] __tcp_ack_snd_check+0xf6/0x380 [ 215.843834] tcp_rcv_established+0x76c/0x17a0 [ 215.848359] ? tcp_data_queue+0x3ac0/0x3ac0 [ 215.852662] tcp_v4_do_rcv+0x541/0x7d0 [ 215.856560] __release_sock+0x12a/0x350 [ 215.860543] release_sock+0x54/0x1b0 [ 215.864254] sk_stream_wait_memory+0x492/0xd20 [ 215.868829] ? sk_stream_wait_connect+0x530/0x530 [ 215.873660] ? __tcp_push_pending_frames+0xa0/0x230 [ 215.878674] ? do_wait_intr_irq+0x270/0x270 [ 215.882981] tcp_sendmsg_locked+0x1179/0x2ef0 [ 215.887461] ? tcp_sendpage+0x60/0x60 [ 215.891248] ? __local_bh_enable_ip+0xc1/0x170 [ 215.895828] tcp_sendmsg+0x2b/0x40 [ 215.899348] inet_sendmsg+0x11a/0x4e0 [ 215.903125] ? security_socket_sendmsg+0x83/0xb0 [ 215.907859] ? inet_recvmsg+0x4d0/0x4d0 [ 215.911813] sock_sendmsg+0xb5/0x100 [ 215.915533] SyS_sendto+0x1c7/0x2c0 [ 215.919163] ? SyS_getpeername+0x220/0x220 [ 215.923391] ? lock_downgrade+0x740/0x740 [ 215.927526] ? wait_for_completion_io+0x10/0x10 [ 215.932175] ? vfs_write+0x319/0x4d0 [ 215.935888] ? fput+0xb/0x140 [ 215.938981] ? SyS_write+0x14d/0x210 [ 215.942681] ? SyS_read+0x210/0x210 [ 215.946311] ? SyS_clock_settime+0x1a0/0x1a0 [ 215.950708] ? do_syscall_64+0x4c/0x640 [ 215.954678] ? SyS_getpeername+0x220/0x220 [ 215.958929] do_syscall_64+0x1d5/0x640 [ 215.962821] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 215.968005] RIP: 0033:0x45d5b9 08:39:37 executing program 5: ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000180)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = signalfd4(r1, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000040)={0xa, {0x4, 0x0, 0xfb}}, 0xa) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="86ef8c68eadac9d4e5d3eefe668a3d4a331a2d53acfbb1766d912bbb490614635c2e3f5d65fdcaaba86075809f2a239609c826b04faca187232faa8a514e3a1accd450dd5a045e94ce0bd64e5b94918156ed766a05e9442830a0b7129b641eb3fd21928d5509355fb0af64113d8285cccdaf1e411742d350ae4870e9571ea6201032cda4619756c819900cbef4349c0845e1395b2ebf6e292490fcc90b822c15f5eb7f6d79e8e89dce195a8a6251598b78beec43e704a95d77a4acbb70f98b51cc773a2797", @ANYRESHEX, @ANYRES16=r1, @ANYRES32, @ANYRESDEC=r0]) [ 215.971186] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 215.978891] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 215.986163] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 215.993429] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 216.000697] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000000a [ 216.007967] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:37 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=no=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 08:39:37 executing program 3 (fault-call:12 fault-nth:11): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 216.083973] FAULT_INJECTION: forcing a failure. [ 216.083973] name failslab, interval 1, probability 0, space 0, times 0 [ 216.096001] CPU: 0 PID: 12191 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 216.103892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.113299] Call Trace: [ 216.115894] dump_stack+0x1b2/0x283 [ 216.119527] should_fail.cold+0x10a/0x154 [ 216.123673] ? ip_send_check+0xb0/0xb0 [ 216.127565] should_failslab+0xd6/0x130 08:39:37 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) write(r2, &(0x7f0000000000)="6173b8dcc23279de553d5624f30bb1da83db318e1a328be8973ff580203f7fbd2ebddb80b235c32b337ff1d501469eb815f2e3522022c59bc59031af59477a408c52f1ab7b5eff52", 0x48) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x2, 0x401, 0x3, 0x0, 0x18, "f3ef2f7597e3a8935cc5e8cb6219e2350ab1fb"}) [ 216.131542] kmem_cache_alloc_node_trace+0x58/0x400 [ 216.136553] __kmalloc_node_track_caller+0x38/0x70 [ 216.141476] pskb_expand_head+0x128/0xd30 [ 216.145632] tcp_trim_head+0x109/0x460 [ 216.149517] tcp_ack+0x2ce3/0x43c0 [ 216.153072] ? tcp_fastretrans_alert+0x2970/0x2970 [ 216.158004] ? __tcp_select_window+0x680/0x680 [ 216.162591] ? trace_hardirqs_on+0x10/0x10 [ 216.166823] ? check_preemption_disabled+0x35/0x240 [ 216.171843] ? tcp_send_ack+0x6f/0x90 [ 216.175642] tcp_rcv_established+0x4fe/0x17a0 [ 216.180135] ? __release_sock+0xce/0x350 [ 216.184200] ? tcp_data_queue+0x3ac0/0x3ac0 [ 216.188521] tcp_v4_do_rcv+0x541/0x7d0 [ 216.192400] __release_sock+0x12a/0x350 [ 216.196364] release_sock+0x54/0x1b0 [ 216.200056] sk_stream_wait_memory+0x492/0xd20 [ 216.204618] ? sk_stream_wait_connect+0x530/0x530 [ 216.209449] ? __tcp_push_pending_frames+0xa0/0x230 [ 216.214453] ? do_wait_intr_irq+0x270/0x270 [ 216.218766] tcp_sendmsg_locked+0x1179/0x2ef0 [ 216.223250] ? tcp_sendpage+0x60/0x60 [ 216.227038] ? __local_bh_enable_ip+0xc1/0x170 [ 216.231602] tcp_sendmsg+0x2b/0x40 [ 216.235130] inet_sendmsg+0x11a/0x4e0 [ 216.238911] ? security_socket_sendmsg+0x83/0xb0 [ 216.243642] ? inet_recvmsg+0x4d0/0x4d0 [ 216.247596] sock_sendmsg+0xb5/0x100 [ 216.251288] SyS_sendto+0x1c7/0x2c0 [ 216.254902] ? SyS_getpeername+0x220/0x220 [ 216.259124] ? lock_downgrade+0x740/0x740 [ 216.263303] ? wait_for_completion_io+0x10/0x10 [ 216.268003] ? vfs_write+0x319/0x4d0 [ 216.271703] ? fput+0xb/0x140 [ 216.274787] ? SyS_write+0x14d/0x210 [ 216.278476] ? SyS_read+0x210/0x210 [ 216.282080] ? SyS_clock_settime+0x1a0/0x1a0 [ 216.286467] ? do_syscall_64+0x4c/0x640 [ 216.290416] ? SyS_getpeername+0x220/0x220 [ 216.294629] do_syscall_64+0x1d5/0x640 [ 216.298496] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 216.303662] RIP: 0033:0x45d5b9 [ 216.306828] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 216.314521] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 216.321773] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 216.329019] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 216.336265] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000000b [ 216.343511] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:37 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="00040000a43cf074513200000000000000a0e7e4314bef44a070cd763eb52f190c5f1e47ae994c9891c9e95773ef7827bec9bb2f42f43612163b8d7169679a20ccf4358e53b7eaf3fdafdc8f24095c7bb9803305544881cb8b034102e1fffe0b2d74e8a3e84ac0300d12028f6bee9f0af0a73b8722f78cdf2ff9fa6cb537a59dcf67528a842ec918b1b2869c4f1efa0daa66bf069dd2a66bdd6fe46c9638d583d2a630e010f91d182626bb39300a5bcd26e28e0216769f066d2fccfdb69e7d3f8553b79fc6929d7cec47", @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000000)) 08:39:37 executing program 3 (fault-call:12 fault-nth:12): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:37 executing program 0: ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f00000001c0)) r0 = getpid() r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x3, 0x20, 0xa6, 0x3, 0x0, 0x2, 0x90, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0x4, 0x2}, 0x412, 0xfffffffffffffffb, 0x7, 0x5, 0x2, 0x8, 0x200}, r0, 0x3, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4641568, 0x400000000000}}, 0x0, 0xfffffffffffffffe, r1, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x40c2, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/212, 0xd4) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x20, 0xffffffff, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xfb, 0x0, 0x3, [0x3]}]}}}}}) connect$packet(r2, &(0x7f0000000500)={0x11, 0xd, r7, 0x1, 0x70, 0x6, @remote}, 0x14) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x40000}]) fcntl$setsig(r4, 0xa, 0x2c) write(r2, &(0x7f0000000600)="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", 0xe00) fallocate(r2, 0x11, 0x0, 0x10000) sendfile(r2, r3, 0x0, 0x11f18) [ 216.461466] audit: type=1800 audit(1599813577.579:29): pid=12212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16046 res=0 [ 216.488259] 9pnet: Insufficient options for proto=fd [ 216.502384] 9pnet: Insufficient options for proto=fd 08:39:37 executing program 4: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x101) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:37 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendto$unix(r0, &(0x7f0000000140)="41f97dcc9bd210a74ae971262feb685e59a33f6cb5a274c63219af7b9d25349f65ef6332a6a78c7b107b17b356bfb1762af2537638069f07ae02f3fb3c508c17a4293879a66f5da41915f10cd1a026d22eabbd6937b36fca943eb769e3e04cd48406d55f476978c5838672a1755200877207e60dfb9908cec820f92d54715c4a2d3ba22eb57ad1ade2b25ed356d006620426e0319c9a", 0x96, 0x40, 0x0, 0x0) [ 216.511413] FAULT_INJECTION: forcing a failure. [ 216.511413] name failslab, interval 1, probability 0, space 0, times 0 [ 216.527269] audit: type=1804 audit(1599813577.599:30): pid=12212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/118/file0" dev="sda1" ino=16046 res=1 [ 216.570107] CPU: 0 PID: 12214 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 216.571353] audit: type=1804 audit(1599813577.609:31): pid=12212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/118/bus" dev="sda1" ino=16047 res=1 [ 216.578010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.578014] Call Trace: [ 216.578032] dump_stack+0x1b2/0x283 [ 216.578049] should_fail.cold+0x10a/0x154 [ 216.578064] should_failslab+0xd6/0x130 [ 216.578077] kmem_cache_alloc_node_trace+0x58/0x400 [ 216.630701] __kmalloc_node_track_caller+0x38/0x70 [ 216.635636] pskb_expand_head+0x128/0xd30 [ 216.639787] ? __save_stack_trace+0x63/0x160 [ 216.644198] ? is_bpf_text_address+0x91/0x150 [ 216.648698] tcp_fragment+0x233/0x1480 [ 216.652592] tcp_match_skb_to_sack+0x1b5/0x2b0 [ 216.657179] tcp_sacktag_walk+0x276/0x11b0 [ 216.661417] ? check_preemption_disabled+0x35/0x240 [ 216.666441] tcp_sacktag_write_queue+0x1022/0x2850 [ 216.671369] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 216.676715] ? lock_acquire+0x170/0x3f0 [ 216.680666] ? tcp_sacktag_walk+0x11b0/0x11b0 [ 216.685142] tcp_ack+0x2635/0x43c0 [ 216.688666] ? sched_clock+0x2a/0x40 [ 216.692361] ? tcp_write_xmit+0xd48/0x4e10 [ 216.696573] ? tcp_fastretrans_alert+0x2970/0x2970 [ 216.701484] ? tcp_parse_options+0x18d/0x9f0 [ 216.705874] ? tcp_check_space+0x12/0x640 [ 216.710009] tcp_rcv_established+0x4fe/0x17a0 [ 216.714509] ? __release_sock+0xce/0x350 [ 216.718790] ? tcp_data_queue+0x3ac0/0x3ac0 [ 216.723223] tcp_v4_do_rcv+0x541/0x7d0 [ 216.727117] __release_sock+0x12a/0x350 [ 216.731095] release_sock+0x54/0x1b0 [ 216.734798] sk_stream_wait_memory+0x492/0xd20 [ 216.739363] ? sk_stream_wait_connect+0x530/0x530 [ 216.744185] ? __tcp_push_pending_frames+0xa0/0x230 [ 216.749193] ? do_wait_intr_irq+0x270/0x270 [ 216.753512] tcp_sendmsg_locked+0x1179/0x2ef0 [ 216.757995] ? tcp_sendpage+0x60/0x60 [ 216.761893] ? __local_bh_enable_ip+0xc1/0x170 [ 216.766455] tcp_sendmsg+0x2b/0x40 [ 216.769970] inet_sendmsg+0x11a/0x4e0 [ 216.773765] ? security_socket_sendmsg+0x83/0xb0 [ 216.778498] ? inet_recvmsg+0x4d0/0x4d0 [ 216.782468] sock_sendmsg+0xb5/0x100 [ 216.786160] SyS_sendto+0x1c7/0x2c0 [ 216.789765] ? SyS_getpeername+0x220/0x220 [ 216.793996] ? lock_downgrade+0x740/0x740 [ 216.798129] ? wait_for_completion_io+0x10/0x10 [ 216.802777] ? vfs_write+0x319/0x4d0 [ 216.806468] ? fput+0xb/0x140 [ 216.809548] ? SyS_write+0x14d/0x210 [ 216.813269] ? SyS_read+0x210/0x210 [ 216.816910] ? SyS_clock_settime+0x1a0/0x1a0 [ 216.821299] ? do_syscall_64+0x4c/0x640 [ 216.825249] ? SyS_getpeername+0x220/0x220 [ 216.829482] do_syscall_64+0x1d5/0x640 [ 216.833356] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 216.838522] RIP: 0033:0x45d5b9 [ 216.841688] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 216.849371] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 216.856616] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 216.863867] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 08:39:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 216.871132] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000000c [ 216.878378] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:38 executing program 3 (fault-call:12 fault-nth:13): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 216.943266] audit: type=1804 audit(1599813578.059:32): pid=12212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/118/bus" dev="sda1" ino=16047 res=1 08:39:38 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x3b0244f9af168ba7, 0x0) ftruncate(r0, 0x88001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff00d) 08:39:38 executing program 5: ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000000)=0x305) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:38 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='task\x00') getpeername$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) getdents(r0, &(0x7f0000000040)=""/95, 0x5f) r1 = syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3d90", 0xfffffff0}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='dosI\b\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$int_out(r1, 0x0, &(0x7f0000000140)) [ 217.005944] FAULT_INJECTION: forcing a failure. [ 217.005944] name failslab, interval 1, probability 0, space 0, times 0 [ 217.027397] CPU: 0 PID: 12238 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 217.035307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.044658] Call Trace: [ 217.047245] dump_stack+0x1b2/0x283 [ 217.050875] should_fail.cold+0x10a/0x154 [ 217.055025] should_failslab+0xd6/0x130 [ 217.059001] kmem_cache_alloc_node+0x54/0x410 [ 217.063500] __alloc_skb+0x5c/0x510 [ 217.067127] sk_stream_alloc_skb+0xb1/0x760 [ 217.071453] tcp_fragment+0x253/0x1480 [ 217.075346] tcp_match_skb_to_sack+0x1b5/0x2b0 [ 217.079929] tcp_sacktag_walk+0x276/0x11b0 [ 217.084169] ? check_preemption_disabled+0x35/0x240 [ 217.089191] tcp_sacktag_write_queue+0x1022/0x2850 [ 217.094130] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 217.099497] ? lock_acquire+0x170/0x3f0 [ 217.103473] ? tcp_sacktag_walk+0x11b0/0x11b0 [ 217.107973] tcp_ack+0x2635/0x43c0 [ 217.111520] ? sched_clock+0x2a/0x40 [ 217.115246] ? tcp_write_xmit+0xd48/0x4e10 [ 217.119479] ? tcp_fastretrans_alert+0x2970/0x2970 [ 217.124413] ? tcp_parse_options+0x18d/0x9f0 [ 217.128838] ? tcp_check_space+0x12/0x640 [ 217.133023] tcp_rcv_established+0x4fe/0x17a0 [ 217.137515] ? __release_sock+0xce/0x350 [ 217.141574] ? tcp_data_queue+0x3ac0/0x3ac0 [ 217.145896] tcp_v4_do_rcv+0x541/0x7d0 [ 217.149783] __release_sock+0x12a/0x350 [ 217.153764] release_sock+0x54/0x1b0 [ 217.157490] sk_stream_wait_memory+0x492/0xd20 [ 217.162086] ? sk_stream_wait_connect+0x530/0x530 [ 217.166929] ? __tcp_push_pending_frames+0xa0/0x230 [ 217.171944] ? do_wait_intr_irq+0x270/0x270 [ 217.176269] tcp_sendmsg_locked+0x1179/0x2ef0 [ 217.180781] ? tcp_sendpage+0x60/0x60 [ 217.184574] ? __local_bh_enable_ip+0xc1/0x170 [ 217.189206] tcp_sendmsg+0x2b/0x40 [ 217.192730] inet_sendmsg+0x11a/0x4e0 [ 217.196511] ? security_socket_sendmsg+0x83/0xb0 [ 217.201250] ? inet_recvmsg+0x4d0/0x4d0 [ 217.205203] sock_sendmsg+0xb5/0x100 [ 217.208938] SyS_sendto+0x1c7/0x2c0 [ 217.212542] ? SyS_getpeername+0x220/0x220 [ 217.216761] ? lock_downgrade+0x740/0x740 [ 217.220912] ? wait_for_completion_io+0x10/0x10 [ 217.225589] ? vfs_write+0x319/0x4d0 [ 217.229284] ? fput+0xb/0x140 [ 217.232372] ? SyS_write+0x14d/0x210 [ 217.236089] ? SyS_read+0x210/0x210 [ 217.239706] ? SyS_clock_settime+0x1a0/0x1a0 [ 217.244094] ? do_syscall_64+0x4c/0x640 [ 217.248053] ? SyS_getpeername+0x220/0x220 [ 217.252332] do_syscall_64+0x1d5/0x640 [ 217.256203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 217.261370] RIP: 0033:0x45d5b9 [ 217.264535] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.272220] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 217.279471] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 217.286767] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 217.294018] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000000d [ 217.301271] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c [ 217.317570] FAT-fs (loop0): Unrecognized mount option "dosI" or missing value 08:39:38 executing program 3 (fault-call:12 fault-nth:14): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 217.411897] FAULT_INJECTION: forcing a failure. [ 217.411897] name failslab, interval 1, probability 0, space 0, times 0 [ 217.424069] CPU: 0 PID: 12260 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 217.431971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.441325] Call Trace: [ 217.443918] dump_stack+0x1b2/0x283 [ 217.447545] should_fail.cold+0x10a/0x154 [ 217.451695] should_failslab+0xd6/0x130 [ 217.455672] kmem_cache_alloc_node_trace+0x58/0x400 [ 217.460690] __kmalloc_node_track_caller+0x38/0x70 [ 217.465625] __alloc_skb+0x96/0x510 [ 217.469253] sk_stream_alloc_skb+0xb1/0x760 [ 217.473573] tcp_fragment+0x253/0x1480 [ 217.477467] tcp_match_skb_to_sack+0x1b5/0x2b0 [ 217.482061] tcp_sacktag_walk+0x276/0x11b0 [ 217.486300] ? check_preemption_disabled+0x35/0x240 [ 217.491320] tcp_sacktag_write_queue+0x1022/0x2850 [ 217.496255] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 217.501625] ? lock_acquire+0x170/0x3f0 [ 217.505603] ? tcp_sacktag_walk+0x11b0/0x11b0 [ 217.510104] tcp_ack+0x2635/0x43c0 [ 217.513650] ? sched_clock+0x2a/0x40 [ 217.517357] ? tcp_write_xmit+0xd48/0x4e10 [ 217.521572] ? tcp_fastretrans_alert+0x2970/0x2970 [ 217.526485] ? tcp_parse_options+0x18d/0x9f0 [ 217.530878] ? tcp_check_space+0x12/0x640 [ 217.535004] tcp_rcv_established+0x4fe/0x17a0 [ 217.539478] ? __release_sock+0xce/0x350 [ 217.543527] ? tcp_data_queue+0x3ac0/0x3ac0 [ 217.547835] tcp_v4_do_rcv+0x541/0x7d0 [ 217.551704] __release_sock+0x12a/0x350 [ 217.555670] release_sock+0x54/0x1b0 [ 217.559371] sk_stream_wait_memory+0x492/0xd20 [ 217.563985] ? sk_stream_wait_connect+0x530/0x530 [ 217.569034] ? __tcp_push_pending_frames+0xa0/0x230 [ 217.574030] ? do_wait_intr_irq+0x270/0x270 [ 217.578335] tcp_sendmsg_locked+0x1179/0x2ef0 [ 217.582818] ? tcp_sendpage+0x60/0x60 [ 217.586608] ? __local_bh_enable_ip+0xc1/0x170 [ 217.591178] tcp_sendmsg+0x2b/0x40 [ 217.594699] inet_sendmsg+0x11a/0x4e0 [ 217.598478] ? security_socket_sendmsg+0x83/0xb0 [ 217.603214] ? inet_recvmsg+0x4d0/0x4d0 [ 217.607167] sock_sendmsg+0xb5/0x100 [ 217.610866] SyS_sendto+0x1c7/0x2c0 [ 217.614479] ? SyS_getpeername+0x220/0x220 [ 217.618692] ? lock_downgrade+0x740/0x740 [ 217.622822] ? wait_for_completion_io+0x10/0x10 [ 217.627468] ? vfs_write+0x319/0x4d0 [ 217.631158] ? fput+0xb/0x140 [ 217.634239] ? SyS_write+0x14d/0x210 [ 217.637927] ? SyS_read+0x210/0x210 [ 217.641530] ? SyS_clock_settime+0x1a0/0x1a0 [ 217.645916] ? do_syscall_64+0x4c/0x640 [ 217.649866] ? SyS_getpeername+0x220/0x220 [ 217.654088] do_syscall_64+0x1d5/0x640 [ 217.657957] entry_SYSCALL_64_after_hwframe+0x46/0xbb 08:39:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:39:38 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)={[{@fat=@errors_remount='errors=remount-ro'}]}) 08:39:38 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2d00469b000000"]) [ 217.663124] RIP: 0033:0x45d5b9 [ 217.666290] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.674027] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 217.681319] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 217.688616] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 217.695864] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000000e [ 217.703121] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:38 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$packet(r4, &(0x7f0000000000)={0x11, 0xf5, 0x0, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000480)={r7, 0x5}, 0x8) getdents64(r6, &(0x7f0000004500)=""/4100, 0x1004) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000240)={0x4, 0x2, 0x4, 0x10000, 0x8, {0x77359400}, {0x3, 0x0, 0x1, 0xfa, 0x3f, 0x4, "4f5364e6"}, 0x4eff22a, 0x4, @fd=r1, 0x9, 0x0, r0}) r8 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0) r10 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="010000800000000000000000000000000800000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYBLOB='\x00'/28, @ANYRES32=r4, @ANYBLOB="00000000833600"/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000300"/28, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000600"/28, @ANYRES32=r10, @ANYBLOB="0000000086c61a0000000000000000000000000000000000cd86aef3"]) 08:39:38 executing program 3 (fault-call:12 fault-nth:15): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 217.782214] 9pnet: Insufficient options for proto=fd 08:39:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x6000040) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40, 0x0) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 217.832608] FAULT_INJECTION: forcing a failure. [ 217.832608] name failslab, interval 1, probability 0, space 0, times 0 [ 217.851893] CPU: 1 PID: 12280 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 217.859808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.869159] Call Trace: [ 217.871737] dump_stack+0x1b2/0x283 [ 217.875350] should_fail.cold+0x10a/0x154 [ 217.879482] should_failslab+0xd6/0x130 [ 217.883435] kmem_cache_alloc_node+0x54/0x410 [ 217.887947] __alloc_skb+0x5c/0x510 [ 217.891573] sk_stream_alloc_skb+0xb1/0x760 [ 217.895891] ? check_preemption_disabled+0x35/0x240 [ 217.900888] tcp_fragment+0x253/0x1480 [ 217.904758] tcp_write_xmit+0xf60/0x4e10 [ 217.908804] ? tcp_current_mss+0x1d8/0x2d0 [ 217.913022] __tcp_push_pending_frames+0xa0/0x230 [ 217.917842] tcp_rcv_established+0x71a/0x17a0 [ 217.922314] ? __release_sock+0xce/0x350 [ 217.926354] ? tcp_data_queue+0x3ac0/0x3ac0 [ 217.930655] tcp_v4_do_rcv+0x541/0x7d0 [ 217.934538] __release_sock+0x12a/0x350 [ 217.938512] release_sock+0x54/0x1b0 [ 217.942206] sk_stream_wait_memory+0x492/0xd20 [ 217.946770] ? sk_stream_wait_connect+0x530/0x530 [ 217.951594] ? __tcp_push_pending_frames+0xa0/0x230 [ 217.956589] ? do_wait_intr_irq+0x270/0x270 [ 217.960901] tcp_sendmsg_locked+0x1179/0x2ef0 [ 217.965408] ? tcp_sendpage+0x60/0x60 [ 217.969193] ? __local_bh_enable_ip+0xc1/0x170 [ 217.973857] tcp_sendmsg+0x2b/0x40 [ 217.977376] inet_sendmsg+0x11a/0x4e0 [ 217.981153] ? security_socket_sendmsg+0x83/0xb0 [ 217.985887] ? inet_recvmsg+0x4d0/0x4d0 [ 217.989842] sock_sendmsg+0xb5/0x100 [ 217.993533] SyS_sendto+0x1c7/0x2c0 [ 217.997142] ? SyS_getpeername+0x220/0x220 [ 218.001372] ? lock_downgrade+0x740/0x740 [ 218.005507] ? wait_for_completion_io+0x10/0x10 [ 218.010157] ? vfs_write+0x319/0x4d0 [ 218.013850] ? fput+0xb/0x140 [ 218.016937] ? SyS_write+0x14d/0x210 [ 218.020631] ? SyS_read+0x210/0x210 [ 218.024253] ? SyS_clock_settime+0x1a0/0x1a0 [ 218.028678] ? do_syscall_64+0x4c/0x640 [ 218.032637] ? SyS_getpeername+0x220/0x220 [ 218.036860] do_syscall_64+0x1d5/0x640 [ 218.040738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 218.045910] RIP: 0033:0x45d5b9 [ 218.049079] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.056766] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 218.064021] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 218.071272] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 08:39:38 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$CHAR_RAW_ZEROOUT(r0, 0x127f, &(0x7f0000000000)={0xd38, 0x4}) setuid(r4) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0xa8000) getsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000002c0), &(0x7f0000000340)=0x4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@appraise_type='appraise_type=imasig'}, {@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, ']%..],('}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r4}}, {@fsmagic={'fsmagic', 0x3d, 0x20}}]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) [ 218.078536] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000000f [ 218.085786] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:39 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff8, 0x7, &(0x7f0000000540)=[{&(0x7f0000000140)="3b37fa604e8e8962419d0141ef27f17a3f82362ee4b7691e86c2c5035a83c91ed9ed7edcf4190a5dea4981e7f1fced2f5a52c7e3bc06e997544228395cfb1c368bd4d4a703c1095522a195b606", 0x4d, 0x2}, {&(0x7f00000001c0)="bbc5d3ba7e81b513e08c12d29da825383fcc4e9b64b81f123cf7e2091765c02665a8488637e448b563124bfac8c3432138aff1932829fe2b9a3576c63ee33889ed1b47d21447671754df04d2cb8fc66cbe70cc3b5a566666c13e70dd72cbcfb5820d25c838e6a55deaccc1fbfd64b48b3f527d58fb6f9074e6fc022c30782d9f50be123147b86b3356dcccaf40e90939f367d7565c54ce2b8d", 0x99, 0x7}, {&(0x7f0000000340)="d6b048a57e64f63289b1bd21ca7019999f5dd52d2dbab3c925ec5659af8d9185d80d7acc4a45465fb893d3acea380d87fb5bf290b5561e6ec7e6acc057e0b25e11d06dbcfd2f64b1866763de3339e65ee4602a4bc4ed6f94f01ae5f5fb750ebc4fa6a293dfc2d0f19c2e7f9836a640c198a6cab931fc70d366f117bbc34ba1937be2a40fa591648a23d8802fb29de055eac211900ff0c74dcc379d0eea1093fbf1ae41944b174d1c2d14fa65", 0xac, 0x7}, {&(0x7f0000000280)="083ef8b1843b1ec84c343f48a32ff1e9aa9097ad8b5acdef4b614dfd5dd0b5980e5f78dc257d294b7f2aba40", 0x2c, 0x4d}, {&(0x7f0000000400)="752d9bba41225b7fc07383adf7d7e91b8d9e560d3c93dbb5b55167295e2e4801c51c79b0a33b42955c34e34606b31d213c7212beb7a2b249846b033b8942f0006640df4b018310a078c83df0642eeedabb7e7c9e0f031b4292ad57af0818caf0da6ff98e9bfb", 0x66, 0xb9}, {&(0x7f0000000480)="8472de2651cab7e358b5a515fb16f0444390bf68212df5d55c4bd909e330e103c0188ea8bf1a6dd4257902c4517cf600ca562f0ff0a9422796ac863f8e58267955871108da8279819c5bd45a66d3382a2348e86e28e2beb796bdfb036436e0cd54683b090dbebe84a931d126ab8af30c92114df065f55a77876f7d8c4d63b0a9e9823cd706b022746206183cd0f2a82d4038c824", 0x94, 0x7fff}, {&(0x7f00000002c0)="d28aa5fb9becf4d99e7aac489a084598f55eee3efa9171229d03ff9926818cc180c5950a3f35f9eb7b72f1c4a381fc1c2dab1007eefe6e10236b2ef19b01", 0x3e}], 0x88011, &(0x7f0000000980)=ANY=[@ANYBLOB='rgrplvb,noloccookie,hash,smackfsdef=/dev/swradio#\x00,uid<', @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=175255fe-Y006-da85-deae-a3b69ddb,dont_appraise,uid<', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f686173682c7569643d872d874251414adee33cb9f2f8c08d", @ANYRESDEC=r4, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="0000a72e8a0f2c1d582d50efd72e815b3978d0c1793b905c9409d18d31397d98ca64a06b66b1aa507a0c802c049823ae321faee3d4e138f05b92ebefe40c956a5062cef360119462e34cd80974cc04783ce6a7047c15fb0852955c759048eeb693752dd5eeb9c65c85a6ca20aa0f321a9bbf5ef477a7b60a821851fb3ad08b4a96146a867dd81a9b92718b4037aa"]) 08:39:39 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:39 executing program 3 (fault-call:12 fault-nth:16): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 218.326693] FAULT_INJECTION: forcing a failure. [ 218.326693] name failslab, interval 1, probability 0, space 0, times 0 [ 218.338457] CPU: 1 PID: 12316 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 218.346335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.355803] Call Trace: [ 218.358385] dump_stack+0x1b2/0x283 [ 218.361995] should_fail.cold+0x10a/0x154 [ 218.366129] should_failslab+0xd6/0x130 [ 218.370089] kmem_cache_alloc_node_trace+0x58/0x400 [ 218.375099] __kmalloc_node_track_caller+0x38/0x70 [ 218.380026] __alloc_skb+0x96/0x510 [ 218.383646] sk_stream_alloc_skb+0xb1/0x760 [ 218.387950] ? check_preemption_disabled+0x35/0x240 [ 218.392945] tcp_fragment+0x253/0x1480 [ 218.396828] tcp_write_xmit+0xf60/0x4e10 [ 218.400886] ? tcp_current_mss+0x1d8/0x2d0 [ 218.405111] __tcp_push_pending_frames+0xa0/0x230 [ 218.409934] tcp_rcv_established+0x71a/0x17a0 [ 218.414417] ? __release_sock+0xce/0x350 [ 218.418470] ? tcp_data_queue+0x3ac0/0x3ac0 [ 218.422771] tcp_v4_do_rcv+0x541/0x7d0 [ 218.426640] __release_sock+0x12a/0x350 [ 218.430596] release_sock+0x54/0x1b0 [ 218.434296] sk_stream_wait_memory+0x492/0xd20 [ 218.438872] ? sk_stream_wait_connect+0x530/0x530 [ 218.443693] ? __tcp_push_pending_frames+0xa0/0x230 [ 218.448697] ? do_wait_intr_irq+0x270/0x270 [ 218.453073] tcp_sendmsg_locked+0x1179/0x2ef0 [ 218.457586] ? tcp_sendpage+0x60/0x60 [ 218.461379] ? __local_bh_enable_ip+0xc1/0x170 [ 218.465940] tcp_sendmsg+0x2b/0x40 [ 218.469463] inet_sendmsg+0x11a/0x4e0 [ 218.473241] ? security_socket_sendmsg+0x83/0xb0 [ 218.477984] ? inet_recvmsg+0x4d0/0x4d0 [ 218.481947] sock_sendmsg+0xb5/0x100 [ 218.485645] SyS_sendto+0x1c7/0x2c0 [ 218.489251] ? SyS_getpeername+0x220/0x220 [ 218.493466] ? lock_downgrade+0x740/0x740 [ 218.497621] ? wait_for_completion_io+0x10/0x10 [ 218.502280] ? vfs_write+0x319/0x4d0 [ 218.505972] ? fput+0xb/0x140 [ 218.509055] ? SyS_write+0x14d/0x210 [ 218.512747] ? SyS_read+0x210/0x210 [ 218.516362] ? do_syscall_64+0x4c/0x640 [ 218.520323] ? SyS_getpeername+0x220/0x220 [ 218.524537] do_syscall_64+0x1d5/0x640 [ 218.528408] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 218.533601] RIP: 0033:0x45d5b9 [ 218.536771] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.544469] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 218.551717] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 218.558971] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 218.566219] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000010 [ 218.573473] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:39 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:39:39 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x200082, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:39 executing program 3 (fault-call:12 fault-nth:17): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 218.712994] FAULT_INJECTION: forcing a failure. [ 218.712994] name failslab, interval 1, probability 0, space 0, times 0 [ 218.726062] CPU: 1 PID: 12327 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 218.733953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.743305] Call Trace: [ 218.745897] dump_stack+0x1b2/0x283 [ 218.749540] should_fail.cold+0x10a/0x154 [ 218.753702] should_failslab+0xd6/0x130 [ 218.757679] kmem_cache_alloc_node+0x54/0x410 [ 218.762176] __alloc_skb+0x5c/0x510 [ 218.765808] __tcp_send_ack.part.0+0x67/0x580 [ 218.770294] tcp_send_ack+0x6f/0x90 [ 218.773914] __tcp_ack_snd_check+0xf6/0x380 [ 218.778226] tcp_rcv_established+0x76c/0x17a0 [ 218.782702] ? __release_sock+0xce/0x350 [ 218.786757] ? tcp_data_queue+0x3ac0/0x3ac0 [ 218.791070] tcp_v4_do_rcv+0x541/0x7d0 [ 218.794942] __release_sock+0x12a/0x350 [ 218.798899] release_sock+0x54/0x1b0 [ 218.802592] sk_stream_wait_memory+0x492/0xd20 [ 218.807155] ? sk_stream_wait_connect+0x530/0x530 [ 218.811976] ? __tcp_push_pending_frames+0xa0/0x230 [ 218.816972] ? do_wait_intr_irq+0x270/0x270 [ 218.821275] tcp_sendmsg_locked+0x1179/0x2ef0 [ 218.825775] ? tcp_sendpage+0x60/0x60 [ 218.829607] ? __local_bh_enable_ip+0xc1/0x170 [ 218.834186] tcp_sendmsg+0x2b/0x40 [ 218.837716] inet_sendmsg+0x11a/0x4e0 [ 218.841622] ? security_socket_sendmsg+0x83/0xb0 [ 218.846371] ? inet_recvmsg+0x4d0/0x4d0 [ 218.850337] sock_sendmsg+0xb5/0x100 [ 218.854038] SyS_sendto+0x1c7/0x2c0 [ 218.857654] ? SyS_getpeername+0x220/0x220 [ 218.861945] ? lock_downgrade+0x740/0x740 [ 218.866091] ? wait_for_completion_io+0x10/0x10 [ 218.870774] ? vfs_write+0x319/0x4d0 [ 218.874475] ? fput+0xb/0x140 [ 218.877565] ? SyS_write+0x14d/0x210 [ 218.881257] ? SyS_read+0x210/0x210 [ 218.884877] ? SyS_clock_settime+0x1a0/0x1a0 [ 218.889277] ? do_syscall_64+0x4c/0x640 [ 218.893234] ? SyS_getpeername+0x220/0x220 [ 218.897480] do_syscall_64+0x1d5/0x640 [ 218.901366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 218.906540] RIP: 0033:0x45d5b9 08:39:40 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$dupfd(r0, 0x406, r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2200, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/91) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="d898b2b9e9c269d4b00d4417414af1abf5cad780e4632f7a4761e3baf3140d6f725ce1bd589a20405b59a217d51739cc390e5435642509d701ead2e6342b69901331a7bb278717e1425c0f738dd011b18e983e3a9cb57b799b571619391dbc57c677ff5e923bf89bc4911714acc38bed589c8d570b3d6af4304d33c85ea803b9cac728b19de9a6d58875ee5611a144421a75e163675e9aa1c6609b83348c0000", @ANYRESHEX=r3, @ANYBLOB=',\x00']) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x208000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x9, 0x40003ff, 0x401, 0x5, 0xd, "3d33340900000000000002dc48abcc88a42e5e"}) 08:39:40 executing program 0: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @default, 0xee00}) [ 218.909738] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.917426] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 218.924678] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 218.931966] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 218.939212] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000011 [ 218.946467] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:40 executing program 3 (fault-call:12 fault-nth:18): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 219.038069] 9pnet: Insufficient options for proto=fd 08:39:40 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1', "e4d794c6b3741af20cfcabf35d4505e5e35f29f66381dbc22816b3a00da243c5a700007f74543ab22eb172247befcf105d71e9cbca94297410bda7d45410f1970069e0531b0d52b2c371ffbb4ac9d2fea5b7bdb0b7f6222a4f4ae6d4d7a89d53be190949b35d36ac73d76795b0a73c68f4581928357206790c65e0fa5cdf07e90bdb71792bc4e7c2f2c9599508ba231cc56fc4c79b19f84aac3b3a2a452e4ded7d0f87cf4c2ebf7e51d4268b38e314ed0f68a6eef76d0a2faf12b656bc29912dba6b86b93b1d00000000000000"}, 0xd1) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000240)=""/250, &(0x7f0000000100)=0xfa) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 219.059566] FAULT_INJECTION: forcing a failure. [ 219.059566] name failslab, interval 1, probability 0, space 0, times 0 [ 219.092019] CPU: 1 PID: 12347 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 219.099929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.109283] Call Trace: [ 219.111878] dump_stack+0x1b2/0x283 [ 219.115513] should_fail.cold+0x10a/0x154 [ 219.119666] should_failslab+0xd6/0x130 [ 219.123643] kmem_cache_alloc_node_trace+0x58/0x400 [ 219.128663] __kmalloc_node_track_caller+0x38/0x70 [ 219.133595] __alloc_skb+0x96/0x510 [ 219.137242] __tcp_send_ack.part.0+0x67/0x580 [ 219.141743] tcp_send_ack+0x6f/0x90 [ 219.145372] __tcp_ack_snd_check+0xf6/0x380 [ 219.149702] tcp_rcv_established+0x76c/0x17a0 [ 219.154203] ? __release_sock+0xce/0x350 [ 219.158299] ? tcp_data_queue+0x3ac0/0x3ac0 [ 219.162623] tcp_v4_do_rcv+0x541/0x7d0 [ 219.166517] __release_sock+0x12a/0x350 [ 219.170497] release_sock+0x54/0x1b0 [ 219.174213] sk_stream_wait_memory+0x492/0xd20 [ 219.178788] ? sk_stream_wait_connect+0x530/0x530 [ 219.183680] ? __tcp_push_pending_frames+0xa0/0x230 [ 219.188688] ? do_wait_intr_irq+0x270/0x270 [ 219.193004] tcp_sendmsg_locked+0x1179/0x2ef0 [ 219.197505] ? tcp_sendpage+0x60/0x60 [ 219.201310] ? __local_bh_enable_ip+0xc1/0x170 [ 219.205895] tcp_sendmsg+0x2b/0x40 [ 219.209421] inet_sendmsg+0x11a/0x4e0 [ 219.213217] ? security_socket_sendmsg+0x83/0xb0 [ 219.217952] ? inet_recvmsg+0x4d0/0x4d0 [ 219.221915] sock_sendmsg+0xb5/0x100 [ 219.225620] SyS_sendto+0x1c7/0x2c0 [ 219.229280] ? SyS_getpeername+0x220/0x220 [ 219.233543] ? lock_downgrade+0x740/0x740 [ 219.237725] ? wait_for_completion_io+0x10/0x10 [ 219.242414] ? vfs_write+0x319/0x4d0 [ 219.246117] ? fput+0xb/0x140 [ 219.249218] ? SyS_write+0x14d/0x210 [ 219.252935] ? SyS_read+0x210/0x210 [ 219.256553] ? SyS_clock_settime+0x1a0/0x1a0 [ 219.260953] ? do_syscall_64+0x4c/0x640 [ 219.264916] ? SyS_getpeername+0x220/0x220 [ 219.269139] do_syscall_64+0x1d5/0x640 [ 219.273011] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 219.278191] RIP: 0033:0x45d5b9 [ 219.281362] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 219.289053] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 219.296313] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 219.303617] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 08:39:40 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff8, 0x7, &(0x7f0000000540)=[{&(0x7f0000000140)="3b37fa604e8e8962419d0141ef27f17a3f82362ee4b7691e86c2c5035a83c91ed9ed7edcf4190a5dea4981e7f1fced2f5a52c7e3bc06e997544228395cfb1c368bd4d4a703c1095522a195b606", 0x4d, 0x2}, {&(0x7f00000001c0)="bbc5d3ba7e81b513e08c12d29da825383fcc4e9b64b81f123cf7e2091765c02665a8488637e448b563124bfac8c3432138aff1932829fe2b9a3576c63ee33889ed1b47d21447671754df04d2cb8fc66cbe70cc3b5a566666c13e70dd72cbcfb5820d25c838e6a55deaccc1fbfd64b48b3f527d58fb6f9074e6fc022c30782d9f50be123147b86b3356dcccaf40e90939f367d7565c54ce2b8d", 0x99, 0x7}, {&(0x7f0000000340)="d6b048a57e64f63289b1bd21ca7019999f5dd52d2dbab3c925ec5659af8d9185d80d7acc4a45465fb893d3acea380d87fb5bf290b5561e6ec7e6acc057e0b25e11d06dbcfd2f64b1866763de3339e65ee4602a4bc4ed6f94f01ae5f5fb750ebc4fa6a293dfc2d0f19c2e7f9836a640c198a6cab931fc70d366f117bbc34ba1937be2a40fa591648a23d8802fb29de055eac211900ff0c74dcc379d0eea1093fbf1ae41944b174d1c2d14fa65", 0xac, 0x7}, {&(0x7f0000000280)="083ef8b1843b1ec84c343f48a32ff1e9aa9097ad8b5acdef4b614dfd5dd0b5980e5f78dc257d294b7f2aba40", 0x2c, 0x4d}, {&(0x7f0000000400)="752d9bba41225b7fc07383adf7d7e91b8d9e560d3c93dbb5b55167295e2e4801c51c79b0a33b42955c34e34606b31d213c7212beb7a2b249846b033b8942f0006640df4b018310a078c83df0642eeedabb7e7c9e0f031b4292ad57af0818caf0da6ff98e9bfb", 0x66, 0xb9}, {&(0x7f0000000480)="8472de2651cab7e358b5a515fb16f0444390bf68212df5d55c4bd909e330e103c0188ea8bf1a6dd4257902c4517cf600ca562f0ff0a9422796ac863f8e58267955871108da8279819c5bd45a66d3382a2348e86e28e2beb796bdfb036436e0cd54683b090dbebe84a931d126ab8af30c92114df065f55a77876f7d8c4d63b0a9e9823cd706b022746206183cd0f2a82d4038c824", 0x94, 0x7fff}, {&(0x7f00000002c0)="d28aa5fb9becf4d99e7aac489a084598f55eee3efa9171229d03ff9926818cc180c5950a3f35f9eb7b72f1c4a381fc1c2dab1007eefe6e10236b2ef19b01", 0x3e}], 0x88011, &(0x7f0000000980)=ANY=[@ANYBLOB='rgrplvb,noloccookie,hash,smackfsdef=/dev/swradio#\x00,uid<', @ANYRESDEC=0x0, @ANYBLOB=',fsuuid=175255fe-Y006-da85-deae-a3b69ddb,dont_appraise,uid<', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f686173682c7569643d872d874251414adee33cb9f2f8c08d", @ANYRESDEC=r4, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="0000a72e8a0f2c1d582d50efd72e815b3978d0c1793b905c9409d18d31397d98ca64a06b66b1aa507a0c802c049823ae321faee3d4e138f05b92ebefe40c956a5062cef360119462e34cd80974cc04783ce6a7047c15fb0852955c759048eeb693752dd5eeb9c65c85a6ca20aa0f321a9bbf5ef477a7b60a821851fb3ad08b4a96146a867dd81a9b92718b4037aa"]) 08:39:40 executing program 5: pipe(&(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000080)) keyctl$get_security(0x11, 0x0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d87a9e865d73546f89bca95d415f03fe065e3234920127dcbf801fbc220f1f7059dd792e75335c3536f35f998907cf4d67aac34c6f4e63cb31dcafa712e2ea9467ae0a7618111f848320c6e1ae53912bbd3c6fd72d7888f9640ad", @ANYRESHEX=r1, @ANYBLOB="2c646566636f6e746578743d757365725f752c66756f633d46494c455f4d4d41502861707072616973655f7479736b1d5e4d41595f415050454e442c00"]) [ 219.310885] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000012 [ 219.318139] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:40 executing program 3 (fault-call:12 fault-nth:19): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 219.417162] FAULT_INJECTION: forcing a failure. [ 219.417162] name failslab, interval 1, probability 0, space 0, times 0 [ 219.442693] CPU: 1 PID: 12367 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 219.450605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.459958] Call Trace: [ 219.462551] dump_stack+0x1b2/0x283 [ 219.466187] should_fail.cold+0x10a/0x154 [ 219.470339] should_failslab+0xd6/0x130 [ 219.474315] kmem_cache_alloc_node_trace+0x58/0x400 [ 219.479342] __kmalloc_node_track_caller+0x38/0x70 [ 219.484284] pskb_expand_head+0x128/0xd30 [ 219.488429] ? __dev_queue_xmit+0xcd6/0x2480 [ 219.492842] tcp_fragment+0x233/0x1480 [ 219.496749] tcp_match_skb_to_sack+0x1b5/0x2b0 [ 219.501364] tcp_sacktag_walk+0x276/0x11b0 [ 219.505600] tcp_sacktag_write_queue+0x1022/0x2850 [ 219.510538] ? tcp_sacktag_walk+0x11b0/0x11b0 [ 219.515034] tcp_ack+0x2635/0x43c0 [ 219.518607] ? tcp_fastretrans_alert+0x2970/0x2970 [ 219.523543] ? __tcp_select_window+0x680/0x680 [ 219.528106] ? tcp_parse_options+0x18d/0x9f0 [ 219.532499] ? tcp_send_ack+0x6f/0x90 [ 219.536289] tcp_rcv_established+0x4fe/0x17a0 [ 219.540777] ? __release_sock+0xce/0x350 [ 219.544824] ? tcp_data_queue+0x3ac0/0x3ac0 [ 219.549768] tcp_v4_do_rcv+0x541/0x7d0 [ 219.553662] __release_sock+0x12a/0x350 [ 219.557620] release_sock+0x54/0x1b0 [ 219.561330] sk_stream_wait_memory+0x492/0xd20 [ 219.565910] ? sk_stream_wait_connect+0x530/0x530 [ 219.570741] ? __tcp_push_pending_frames+0xa0/0x230 [ 219.575734] ? do_wait_intr_irq+0x270/0x270 [ 219.580038] tcp_sendmsg_locked+0x1179/0x2ef0 [ 219.584536] ? tcp_sendpage+0x60/0x60 [ 219.588335] ? __local_bh_enable_ip+0xc1/0x170 [ 219.592911] tcp_sendmsg+0x2b/0x40 [ 219.596446] inet_sendmsg+0x11a/0x4e0 [ 219.600224] ? security_socket_sendmsg+0x83/0xb0 [ 219.604965] ? inet_recvmsg+0x4d0/0x4d0 [ 219.608925] sock_sendmsg+0xb5/0x100 [ 219.612616] SyS_sendto+0x1c7/0x2c0 [ 219.616230] ? SyS_getpeername+0x220/0x220 [ 219.620454] ? lock_downgrade+0x740/0x740 [ 219.624606] ? wait_for_completion_io+0x10/0x10 [ 219.629285] ? vfs_write+0x319/0x4d0 [ 219.633002] ? fput+0xb/0x140 [ 219.636104] ? SyS_write+0x14d/0x210 [ 219.639795] ? SyS_read+0x210/0x210 [ 219.643428] ? SyS_clock_settime+0x1a0/0x1a0 [ 219.647830] ? do_syscall_64+0x4c/0x640 [ 219.651800] ? SyS_getpeername+0x220/0x220 [ 219.656023] do_syscall_64+0x1d5/0x640 [ 219.659897] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 219.665069] RIP: 0033:0x45d5b9 08:39:40 executing program 2 (fault-call:4 fault-nth:0): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 219.668246] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 219.675931] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 219.683180] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 219.690436] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 219.697687] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000013 [ 219.704945] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:40 executing program 3 (fault-call:12 fault-nth:20): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 219.750997] 9pnet: Insufficient options for proto=fd [ 219.773330] FAULT_INJECTION: forcing a failure. [ 219.773330] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.793974] CPU: 1 PID: 12378 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 219.801885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.811236] Call Trace: [ 219.813827] dump_stack+0x1b2/0x283 [ 219.817460] should_fail.cold+0x10a/0x154 [ 219.821613] __alloc_pages_nodemask+0x22c/0x2720 [ 219.826372] ? lock_acquire+0x170/0x3f0 [ 219.830342] ? pipe_write+0xb7/0xe10 [ 219.834062] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 219.838902] ? lock_acquire+0x170/0x3f0 [ 219.842875] ? lock_downgrade+0x740/0x740 [ 219.847026] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 219.852475] ? avc_has_perm+0x1a4/0x330 [ 219.853425] FAULT_INJECTION: forcing a failure. [ 219.853425] name failslab, interval 1, probability 0, space 0, times 0 [ 219.856445] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 219.856467] alloc_pages_current+0x155/0x260 [ 219.856479] pipe_write+0x920/0xe10 [ 219.856495] __vfs_write+0x44c/0x630 [ 219.856505] ? kernel_read+0x110/0x110 [ 219.856524] ? rw_verify_area+0xe1/0x2a0 [ 219.856537] vfs_write+0x17f/0x4d0 [ 219.895621] SyS_write+0xf2/0x210 [ 219.899057] ? SyS_read+0x210/0x210 [ 219.902664] ? SyS_clock_settime+0x1a0/0x1a0 [ 219.907058] ? do_syscall_64+0x4c/0x640 [ 219.911046] ? SyS_read+0x210/0x210 [ 219.914657] do_syscall_64+0x1d5/0x640 [ 219.918528] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 219.923697] RIP: 0033:0x45d5b9 [ 219.926870] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.934563] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 219.941813] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 219.949061] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 219.956309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.963557] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c [ 219.970820] CPU: 0 PID: 12381 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 219.978697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.988028] Call Trace: [ 219.990608] dump_stack+0x1b2/0x283 [ 219.994215] should_fail.cold+0x10a/0x154 [ 219.998344] should_failslab+0xd6/0x130 [ 220.002311] kmem_cache_alloc_node+0x54/0x410 [ 220.006792] __alloc_skb+0x5c/0x510 [ 220.010400] sk_stream_alloc_skb+0xb1/0x760 [ 220.014709] tcp_fragment+0x253/0x1480 [ 220.018585] tcp_match_skb_to_sack+0x1b5/0x2b0 [ 220.023161] tcp_sacktag_walk+0x276/0x11b0 [ 220.027383] tcp_sacktag_write_queue+0x1022/0x2850 [ 220.032297] ? tcp_sacktag_walk+0x11b0/0x11b0 [ 220.036776] tcp_ack+0x2635/0x43c0 [ 220.040302] ? tcp_fastretrans_alert+0x2970/0x2970 [ 220.045207] ? __tcp_select_window+0x680/0x680 [ 220.049777] ? tcp_parse_options+0x18d/0x9f0 [ 220.054174] ? tcp_send_ack+0x6f/0x90 [ 220.057956] tcp_rcv_established+0x4fe/0x17a0 [ 220.062431] ? __release_sock+0xce/0x350 [ 220.066474] ? tcp_data_queue+0x3ac0/0x3ac0 [ 220.070797] tcp_v4_do_rcv+0x541/0x7d0 [ 220.074666] __release_sock+0x12a/0x350 [ 220.078624] release_sock+0x54/0x1b0 [ 220.082323] sk_stream_wait_memory+0x492/0xd20 [ 220.086889] ? sk_stream_wait_connect+0x530/0x530 [ 220.091709] ? __tcp_push_pending_frames+0xa0/0x230 [ 220.096702] ? do_wait_intr_irq+0x270/0x270 [ 220.101003] tcp_sendmsg_locked+0x1179/0x2ef0 [ 220.105487] ? tcp_sendpage+0x60/0x60 [ 220.109276] ? __local_bh_enable_ip+0xc1/0x170 [ 220.113837] tcp_sendmsg+0x2b/0x40 [ 220.117354] inet_sendmsg+0x11a/0x4e0 [ 220.121149] ? security_socket_sendmsg+0x83/0xb0 [ 220.125881] ? inet_recvmsg+0x4d0/0x4d0 [ 220.129833] sock_sendmsg+0xb5/0x100 [ 220.133534] SyS_sendto+0x1c7/0x2c0 [ 220.137149] ? SyS_getpeername+0x220/0x220 [ 220.141360] ? lock_downgrade+0x740/0x740 [ 220.145491] ? wait_for_completion_io+0x10/0x10 [ 220.150135] ? vfs_write+0x319/0x4d0 [ 220.153826] ? fput+0xb/0x140 [ 220.156907] ? SyS_write+0x14d/0x210 [ 220.160598] ? SyS_read+0x210/0x210 [ 220.164204] ? SyS_clock_settime+0x1a0/0x1a0 [ 220.168592] ? do_syscall_64+0x4c/0x640 [ 220.172542] ? SyS_getpeername+0x220/0x220 [ 220.176758] do_syscall_64+0x1d5/0x640 [ 220.180626] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 220.185793] RIP: 0033:0x45d5b9 [ 220.188958] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 220.196660] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 220.203905] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 220.211161] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 08:39:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x3ea8, 0x0, 0x0, "8113ed6acaba2b87d9e50d885493cb8c96dc9d"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) 08:39:41 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x82000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:41 executing program 1: ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000200)={0x3f}) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r1) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x18}]) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, &(0x7f0000004500)=""/4100, 0x1004) r4 = creat(&(0x7f0000000140)='./file0\x00', 0xe0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f0000000000)="a09ca9776284229b5c0c9eeec07ce095b5f3c53798257ecec8a773ad1d0600d7fdd98f110459ea304dc9f2002cbc0602d927b378b19396fa8048b3d350204c894672ea66d0206bf345f4774981207b6e973db33674b01f0e2281b26b0c09872f563e034ea9c359a3f55472e7d2ab29c612c5c455", 0x74, 0x2, 0x0, 0x3, r4}, &(0x7f00000001c0)) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) recvfrom(r3, &(0x7f0000000240)=""/90, 0x5a, 0x1, &(0x7f0000000340)=@sco, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) [ 220.218415] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000014 [ 220.225665] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c [ 220.237972] 9pnet: Insufficient options for proto=fd [ 220.246081] 9pnet: Insufficient options for proto=fd 08:39:41 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000780), 0x0) write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) inotify_init1(0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x80000001, 0x8, 0x5, 0x6, 0x3, 0x3f], 0x6, 0x1000, 0x0, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="f0000000ed0300012bbd7000fedbdf2593a8fab4ea6d1b55110ffe80b34138b3f9481061955d921ae75dfaa3f00be9652bcd6f7026734e5a8456ceaf9d7faad39c9bbd2a24f4cc98a2a2ba86dbd23dc8581da9acf53be0fd190fb1d1061ce7e0b23e641908ea51b92510d8bedcf5b1be2f4acd4c87b834180b6517721efc903ed486314cbd880832469cd82dfe19b1ca17478a5f0a4af3874f2463a2dea9d8329a904d819a1615f18039eda632a88adc7c423c9f99ad08556126e2e1ea8b8ac2c8d7f979c23eadec0cd39d76153027232cc03eaa32da38fd801515a2d56c832e00"], 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa4000960) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000200)={0x50002003}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb3d4, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 220.331248] 9pnet: Insufficient options for proto=fd 08:39:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000000)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000380)={0x5, 0x7, 0xff}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r6, 0x8}}, 0x10) mount$9p_virtio(&(0x7f0000000040)='syz\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x18010, &(0x7f0000000240)={'trans=virtio,', {[{@fscache='fscache'}, {@version_u='version=9p2000.u'}, {@debug={'debug', 0x3d, 0x6000000}}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, 'rfdno'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 08:39:41 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:41 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x5b, "107f25e733ee35c05250c152161178a300b19bbc7f107f27904c0b294ddd902dc3b6edd976288a3538bc1ad9e07abf03f76617e9fced32631d61d1380ea38f8d1096b1bfa7f1994bb347d178067afe4e62421a06fa163aabf18e22"}, &(0x7f0000000140)=0x7f) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 08:39:41 executing program 3 (fault-call:12 fault-nth:21): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 220.548254] FAULT_INJECTION: forcing a failure. [ 220.548254] name failslab, interval 1, probability 0, space 0, times 0 [ 220.560271] CPU: 1 PID: 12426 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 220.568151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.577499] Call Trace: [ 220.580078] dump_stack+0x1b2/0x283 [ 220.583713] should_fail.cold+0x10a/0x154 [ 220.587866] should_failslab+0xd6/0x130 [ 220.591853] kmem_cache_alloc_node_trace+0x58/0x400 [ 220.596877] __kmalloc_node_track_caller+0x38/0x70 [ 220.601809] __alloc_skb+0x96/0x510 [ 220.605449] sk_stream_alloc_skb+0xb1/0x760 [ 220.609775] tcp_fragment+0x253/0x1480 [ 220.613660] tcp_match_skb_to_sack+0x1b5/0x2b0 [ 220.618244] tcp_sacktag_walk+0x276/0x11b0 [ 220.622491] tcp_sacktag_write_queue+0x1022/0x2850 [ 220.627433] ? tcp_sacktag_walk+0x11b0/0x11b0 [ 220.632021] tcp_ack+0x2635/0x43c0 [ 220.635579] ? tcp_fastretrans_alert+0x2970/0x2970 [ 220.640505] ? __tcp_select_window+0x680/0x680 08:39:41 executing program 2 (fault-call:4 fault-nth:1): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 220.645089] ? tcp_parse_options+0x18d/0x9f0 [ 220.649505] ? tcp_send_ack+0x6f/0x90 [ 220.653297] tcp_rcv_established+0x4fe/0x17a0 [ 220.657783] ? __release_sock+0xce/0x350 [ 220.661866] ? tcp_data_queue+0x3ac0/0x3ac0 [ 220.665907] FAULT_INJECTION: forcing a failure. [ 220.665907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.666175] tcp_v4_do_rcv+0x541/0x7d0 [ 220.681833] __release_sock+0x12a/0x350 [ 220.685811] release_sock+0x54/0x1b0 [ 220.689525] sk_stream_wait_memory+0x492/0xd20 [ 220.694108] ? sk_stream_wait_connect+0x530/0x530 [ 220.698946] ? __tcp_push_pending_frames+0xa0/0x230 [ 220.703976] ? do_wait_intr_irq+0x270/0x270 [ 220.708290] tcp_sendmsg_locked+0x1179/0x2ef0 [ 220.712781] ? tcp_sendpage+0x60/0x60 [ 220.716598] ? __local_bh_enable_ip+0xc1/0x170 [ 220.721177] tcp_sendmsg+0x2b/0x40 [ 220.724703] inet_sendmsg+0x11a/0x4e0 [ 220.728490] ? security_socket_sendmsg+0x83/0xb0 [ 220.733225] ? inet_recvmsg+0x4d0/0x4d0 [ 220.737191] sock_sendmsg+0xb5/0x100 [ 220.740891] SyS_sendto+0x1c7/0x2c0 [ 220.744510] ? SyS_getpeername+0x220/0x220 [ 220.748734] ? lock_downgrade+0x740/0x740 [ 220.752870] ? wait_for_completion_io+0x10/0x10 [ 220.757528] ? vfs_write+0x319/0x4d0 [ 220.761220] ? fput+0xb/0x140 [ 220.763238] 9pnet: Insufficient options for proto=fd [ 220.764309] ? SyS_write+0x14d/0x210 [ 220.764318] ? SyS_read+0x210/0x210 [ 220.764329] ? SyS_clock_settime+0x1a0/0x1a0 [ 220.764340] ? do_syscall_64+0x4c/0x640 [ 220.764348] ? SyS_getpeername+0x220/0x220 [ 220.764357] do_syscall_64+0x1d5/0x640 [ 220.764373] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 220.764380] RIP: 0033:0x45d5b9 [ 220.764386] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 220.764396] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 220.764400] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 220.764405] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 220.764410] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000015 [ 220.764415] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c [ 220.838356] CPU: 1 PID: 12432 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 220.853781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.863135] Call Trace: [ 220.865758] dump_stack+0x1b2/0x283 [ 220.869366] should_fail.cold+0x10a/0x154 [ 220.873505] __alloc_pages_nodemask+0x22c/0x2720 [ 220.878261] ? trace_hardirqs_on+0x10/0x10 [ 220.882537] ? lock_acquire+0x170/0x3f0 [ 220.886495] ? pipe_write+0xb7/0xe10 [ 220.890191] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 220.895056] ? __might_fault+0x104/0x1b0 [ 220.899100] ? copyin+0xa0/0xc0 [ 220.902354] ? copy_page_from_iter+0x4fd/0x730 [ 220.906915] alloc_pages_current+0x155/0x260 [ 220.911300] pipe_write+0x920/0xe10 [ 220.914909] __vfs_write+0x44c/0x630 [ 220.918605] ? kernel_read+0x110/0x110 [ 220.922521] ? rw_verify_area+0xe1/0x2a0 [ 220.926574] vfs_write+0x17f/0x4d0 [ 220.930091] SyS_write+0xf2/0x210 [ 220.933519] ? SyS_read+0x210/0x210 [ 220.937128] ? SyS_clock_settime+0x1a0/0x1a0 [ 220.941523] ? do_syscall_64+0x4c/0x640 [ 220.945510] ? SyS_read+0x210/0x210 [ 220.949118] do_syscall_64+0x1d5/0x640 [ 220.952985] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 220.958149] RIP: 0033:0x45d5b9 [ 220.961315] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.968997] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 220.976243] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 220.983530] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 220.990804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.998051] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:42 executing program 2 (fault-call:4 fault-nth:2): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:42 executing program 3 (fault-call:12 fault-nth:22): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 221.083099] FAULT_INJECTION: forcing a failure. [ 221.083099] name failslab, interval 1, probability 0, space 0, times 0 [ 221.101457] CPU: 1 PID: 12440 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 221.109539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.118943] Call Trace: [ 221.120092] FAULT_INJECTION: forcing a failure. [ 221.120092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.121665] dump_stack+0x1b2/0x283 [ 221.137097] should_fail.cold+0x10a/0x154 [ 221.141247] should_failslab+0xd6/0x130 [ 221.145213] kmem_cache_alloc_node_trace+0x58/0x400 [ 221.150237] __kmalloc_node_track_caller+0x38/0x70 [ 221.155156] __alloc_skb+0x96/0x510 [ 221.158779] sk_stream_alloc_skb+0xb1/0x760 [ 221.163089] tcp_fragment+0x253/0x1480 [ 221.166961] tcp_match_skb_to_sack+0x1b5/0x2b0 [ 221.171548] tcp_sacktag_walk+0x276/0x11b0 [ 221.175779] tcp_sacktag_write_queue+0x1022/0x2850 [ 221.180701] ? tcp_sacktag_walk+0x11b0/0x11b0 [ 221.185182] tcp_ack+0x2635/0x43c0 [ 221.188722] ? tcp_fastretrans_alert+0x2970/0x2970 [ 221.193639] ? __tcp_select_window+0x680/0x680 [ 221.198206] ? tcp_parse_options+0x18d/0x9f0 [ 221.202600] ? tcp_send_ack+0x6f/0x90 [ 221.206467] tcp_rcv_established+0x4fe/0x17a0 [ 221.210944] ? __release_sock+0xce/0x350 [ 221.214995] ? tcp_data_queue+0x3ac0/0x3ac0 [ 221.218799] 9pnet: Insufficient options for proto=fd [ 221.219315] tcp_v4_do_rcv+0x541/0x7d0 [ 221.219331] __release_sock+0x12a/0x350 [ 221.219345] release_sock+0x54/0x1b0 [ 221.235953] sk_stream_wait_memory+0x492/0xd20 [ 221.240538] ? sk_stream_wait_connect+0x530/0x530 [ 221.245378] ? __tcp_push_pending_frames+0xa0/0x230 [ 221.250498] ? do_wait_intr_irq+0x270/0x270 [ 221.254814] tcp_sendmsg_locked+0x1179/0x2ef0 [ 221.259306] ? tcp_sendpage+0x60/0x60 [ 221.263087] ? __local_bh_enable_ip+0xc1/0x170 [ 221.267758] tcp_sendmsg+0x2b/0x40 [ 221.271289] inet_sendmsg+0x11a/0x4e0 [ 221.275085] ? security_socket_sendmsg+0x83/0xb0 [ 221.279835] ? inet_recvmsg+0x4d0/0x4d0 [ 221.283806] sock_sendmsg+0xb5/0x100 [ 221.287513] SyS_sendto+0x1c7/0x2c0 [ 221.291130] ? SyS_getpeername+0x220/0x220 [ 221.295357] ? lock_downgrade+0x740/0x740 [ 221.299502] ? wait_for_completion_io+0x10/0x10 [ 221.304159] ? vfs_write+0x319/0x4d0 [ 221.307859] ? fput+0xb/0x140 [ 221.310945] ? SyS_write+0x14d/0x210 [ 221.314644] ? SyS_read+0x210/0x210 [ 221.318256] ? SyS_clock_settime+0x1a0/0x1a0 [ 221.322649] ? do_syscall_64+0x4c/0x640 [ 221.326616] ? SyS_getpeername+0x220/0x220 [ 221.330843] do_syscall_64+0x1d5/0x640 [ 221.334721] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 221.339899] RIP: 0033:0x45d5b9 [ 221.343068] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 221.350754] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 221.358009] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 221.365268] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 221.372519] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000016 [ 221.379770] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c [ 221.387034] CPU: 0 PID: 12441 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 221.394922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.404272] Call Trace: [ 221.406869] dump_stack+0x1b2/0x283 [ 221.410506] should_fail.cold+0x10a/0x154 [ 221.414664] __alloc_pages_nodemask+0x22c/0x2720 [ 221.419423] ? trace_hardirqs_on+0x10/0x10 [ 221.423651] ? lock_acquire+0x170/0x3f0 [ 221.427613] ? pipe_write+0xb7/0xe10 [ 221.431330] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 221.436170] ? __might_fault+0x104/0x1b0 [ 221.440240] ? copyin+0xa0/0xc0 [ 221.443522] ? copy_page_from_iter+0x4fd/0x730 [ 221.448107] alloc_pages_current+0x155/0x260 [ 221.452505] pipe_write+0x920/0xe10 [ 221.456122] __vfs_write+0x44c/0x630 [ 221.459820] ? kernel_read+0x110/0x110 [ 221.463691] ? rw_verify_area+0xe1/0x2a0 [ 221.467746] vfs_write+0x17f/0x4d0 [ 221.471266] SyS_write+0xf2/0x210 [ 221.474697] ? SyS_read+0x210/0x210 [ 221.478316] ? SyS_clock_settime+0x1a0/0x1a0 [ 221.482718] ? do_syscall_64+0x4c/0x640 [ 221.486683] ? SyS_read+0x210/0x210 [ 221.490330] do_syscall_64+0x1d5/0x640 [ 221.494206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 221.499382] RIP: 0033:0x45d5b9 [ 221.502551] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.510240] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 221.517539] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 221.524791] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 08:39:42 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:42 executing program 0: dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 221.532051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.539305] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:42 executing program 3 (fault-call:12 fault-nth:23): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:42 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="74095796b53f361a74a26b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x8000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x2f, 0x2a, 0x8, 0xffffffe1, 0x20, @rand_addr=' \x01\x00', @mcast1, 0x80, 0x1, 0x5, 0x7f}}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000280)={0x400, 0x9}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x1432c0, 0x0) ioctl$CHAR_RAW_IOMIN(r4, 0x1278, &(0x7f0000000240)) 08:39:42 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000140), &(0x7f0000000040)=0x60, 0x80000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) 08:39:42 executing program 2 (fault-call:4 fault-nth:3): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 221.641519] FAULT_INJECTION: forcing a failure. [ 221.641519] name failslab, interval 1, probability 0, space 0, times 0 [ 221.701732] CPU: 1 PID: 12463 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 221.709642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.718996] Call Trace: [ 221.721594] dump_stack+0x1b2/0x283 [ 221.725226] should_fail.cold+0x10a/0x154 [ 221.729552] should_failslab+0xd6/0x130 [ 221.733528] kmem_cache_alloc_node_trace+0x58/0x400 [ 221.738545] __kmalloc_node_track_caller+0x38/0x70 [ 221.743473] __alloc_skb+0x96/0x510 [ 221.747106] sk_stream_alloc_skb+0xb1/0x760 [ 221.751426] ? tcp_sync_mss+0x260/0x260 [ 221.755398] tcp_fragment+0x253/0x1480 [ 221.759288] __tcp_retransmit_skb+0x964/0x1bc0 [ 221.763873] ? tcp_mark_head_lost+0x38b/0xaf0 [ 221.768382] tcp_retransmit_skb+0x28/0x220 [ 221.772616] tcp_xmit_retransmit_queue.part.0+0x145/0x6f0 [ 221.778156] ? bbr_lt_bw_sampling+0x1190/0x1190 [ 221.782827] tcp_xmit_retransmit_queue+0x4d/0x60 [ 221.787579] tcp_ack+0x2319/0x43c0 [ 221.791131] ? tcp_fastretrans_alert+0x2970/0x2970 [ 221.796057] ? __tcp_select_window+0x680/0x680 [ 221.800636] ? tcp_parse_options+0x18d/0x9f0 [ 221.805051] ? tcp_send_ack+0x6f/0x90 [ 221.808849] tcp_rcv_established+0x4fe/0x17a0 [ 221.813345] ? __release_sock+0xce/0x350 [ 221.817405] ? tcp_data_queue+0x3ac0/0x3ac0 [ 221.821729] tcp_v4_do_rcv+0x541/0x7d0 [ 221.825618] __release_sock+0x12a/0x350 [ 221.829592] release_sock+0x54/0x1b0 [ 221.833308] sk_stream_wait_memory+0x492/0xd20 [ 221.837892] ? sk_stream_wait_connect+0x530/0x530 [ 221.842735] ? __tcp_push_pending_frames+0xa0/0x230 [ 221.847742] ? do_wait_intr_irq+0x270/0x270 [ 221.852069] tcp_sendmsg_locked+0x1179/0x2ef0 [ 221.856579] ? tcp_sendpage+0x60/0x60 [ 221.860380] ? __local_bh_enable_ip+0xc1/0x170 [ 221.865051] tcp_sendmsg+0x2b/0x40 [ 221.868586] inet_sendmsg+0x11a/0x4e0 [ 221.872377] ? security_socket_sendmsg+0x83/0xb0 [ 221.877121] ? inet_recvmsg+0x4d0/0x4d0 [ 221.881110] sock_sendmsg+0xb5/0x100 [ 221.884809] SyS_sendto+0x1c7/0x2c0 [ 221.888427] ? SyS_getpeername+0x220/0x220 [ 221.892654] ? lock_downgrade+0x740/0x740 [ 221.896827] ? wait_for_completion_io+0x10/0x10 [ 221.901487] ? vfs_write+0x319/0x4d0 [ 221.905192] ? fput+0xb/0x140 [ 221.908307] ? SyS_write+0x14d/0x210 [ 221.912024] ? SyS_read+0x210/0x210 [ 221.915641] ? SyS_clock_settime+0x1a0/0x1a0 [ 221.920049] ? do_syscall_64+0x4c/0x640 [ 221.924011] ? SyS_getpeername+0x220/0x220 [ 221.928325] do_syscall_64+0x1d5/0x640 [ 221.932205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 221.937379] RIP: 0033:0x45d5b9 [ 221.940556] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 08:39:43 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="74ffff6e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x5, 0x7}}, 0x28) getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) [ 221.948345] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 221.955601] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 221.962857] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 221.970115] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000017 [ 221.977370] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c [ 222.017903] FAULT_INJECTION: forcing a failure. [ 222.017903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.070106] CPU: 1 PID: 12472 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 222.078015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.087383] Call Trace: [ 222.089972] dump_stack+0x1b2/0x283 [ 222.093604] should_fail.cold+0x10a/0x154 [ 222.097752] __alloc_pages_nodemask+0x22c/0x2720 [ 222.102504] ? trace_hardirqs_on+0x10/0x10 [ 222.106731] ? lock_acquire+0x170/0x3f0 [ 222.110699] ? pipe_write+0xb7/0xe10 [ 222.114414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 222.119249] ? __might_fault+0x104/0x1b0 [ 222.123315] ? copyin+0xa0/0xc0 [ 222.126589] ? copy_page_from_iter+0x4fd/0x730 [ 222.131166] alloc_pages_current+0x155/0x260 [ 222.135570] pipe_write+0x920/0xe10 [ 222.139194] __vfs_write+0x44c/0x630 [ 222.142904] ? kernel_read+0x110/0x110 [ 222.146795] ? rw_verify_area+0xe1/0x2a0 [ 222.150853] vfs_write+0x17f/0x4d0 [ 222.154387] SyS_write+0xf2/0x210 [ 222.157832] ? SyS_read+0x210/0x210 [ 222.161452] ? SyS_clock_settime+0x1a0/0x1a0 [ 222.165852] ? do_syscall_64+0x4c/0x640 [ 222.169828] ? SyS_read+0x210/0x210 [ 222.173453] do_syscall_64+0x1d5/0x640 [ 222.177360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 222.182542] RIP: 0033:0x45d5b9 [ 222.185724] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.193424] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 222.200688] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 222.207958] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 08:39:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) pipe(&(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000000)={0x6000, 0x4000, 0x8, 0x8, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r4, 0xd90da000) 08:39:43 executing program 3 (fault-call:12 fault-nth:24): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 222.215321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 222.222571] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x5, 0x7, 0x0, 0x400, 0x78}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}]}, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) msgget$private(0x0, 0x582) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000540)) syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8090c1, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x200}}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@uid_lt={'uid<', r5}}, {@euid_gt={'euid>', r6}}, {@appraise='appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x65, 0x39, 0x35, 0x31, 0x30, 0x37], 0x2d, [0x30, 0x31, 0x0, 0x64], 0x2d, [0x30, 0x63, 0x62, 0x31], 0x2d, [0x36, 0x62, 0x64, 0x38], 0x2d, [0x66, 0x31, 0x33, 0x39, 0x62, 0x32, 0x39, 0x33]}}}, {@dont_measure='dont_measure'}]}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:39:43 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0x4, 0x4) pipe(&(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 222.293195] FAULT_INJECTION: forcing a failure. [ 222.293195] name failslab, interval 1, probability 0, space 0, times 0 [ 222.338522] CPU: 1 PID: 12496 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 222.346437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.355791] Call Trace: [ 222.358384] dump_stack+0x1b2/0x283 [ 222.362018] should_fail.cold+0x10a/0x154 [ 222.366171] should_failslab+0xd6/0x130 [ 222.370145] kmem_cache_alloc_node+0x54/0x410 [ 222.374649] __alloc_skb+0x5c/0x510 [ 222.378316] sk_stream_alloc_skb+0xb1/0x760 [ 222.382641] ? tcp_sync_mss+0x260/0x260 [ 222.386622] tcp_fragment+0x253/0x1480 [ 222.390513] __tcp_retransmit_skb+0x964/0x1bc0 [ 222.395090] ? tcp_mark_head_lost+0x38b/0xaf0 [ 222.399567] tcp_retransmit_skb+0x28/0x220 [ 222.403784] tcp_xmit_retransmit_queue.part.0+0x145/0x6f0 [ 222.409326] ? bbr_lt_bw_sampling+0x1190/0x1190 [ 222.413999] tcp_xmit_retransmit_queue+0x4d/0x60 [ 222.418741] tcp_ack+0x2319/0x43c0 [ 222.422268] ? tcp_fastretrans_alert+0x2970/0x2970 [ 222.427174] ? __tcp_select_window+0x680/0x680 [ 222.431734] ? tcp_parse_options+0x18d/0x9f0 [ 222.436126] ? tcp_send_ack+0x6f/0x90 [ 222.439908] tcp_rcv_established+0x4fe/0x17a0 [ 222.444382] ? __release_sock+0xce/0x350 [ 222.448420] ? tcp_data_queue+0x3ac0/0x3ac0 [ 222.452721] tcp_v4_do_rcv+0x541/0x7d0 [ 222.456585] __release_sock+0x12a/0x350 [ 222.460549] release_sock+0x54/0x1b0 [ 222.464240] sk_stream_wait_memory+0x492/0xd20 [ 222.468802] ? sk_stream_wait_connect+0x530/0x530 [ 222.473622] ? __tcp_push_pending_frames+0xa0/0x230 [ 222.478617] ? do_wait_intr_irq+0x270/0x270 [ 222.482920] tcp_sendmsg_locked+0x1179/0x2ef0 [ 222.487400] ? tcp_sendpage+0x60/0x60 [ 222.491179] ? __local_bh_enable_ip+0xc1/0x170 [ 222.495739] tcp_sendmsg+0x2b/0x40 [ 222.499257] inet_sendmsg+0x11a/0x4e0 [ 222.503035] ? security_socket_sendmsg+0x83/0xb0 [ 222.507780] ? inet_recvmsg+0x4d0/0x4d0 [ 222.511762] sock_sendmsg+0xb5/0x100 [ 222.515458] SyS_sendto+0x1c7/0x2c0 [ 222.519063] ? SyS_getpeername+0x220/0x220 [ 222.523280] ? lock_downgrade+0x740/0x740 [ 222.527411] ? wait_for_completion_io+0x10/0x10 [ 222.532068] ? vfs_write+0x319/0x4d0 [ 222.535759] ? fput+0xb/0x140 [ 222.538842] ? SyS_write+0x14d/0x210 [ 222.542531] ? SyS_read+0x210/0x210 [ 222.546137] ? SyS_clock_settime+0x1a0/0x1a0 [ 222.550526] ? do_syscall_64+0x4c/0x640 [ 222.554476] ? SyS_getpeername+0x220/0x220 [ 222.558698] do_syscall_64+0x1d5/0x640 [ 222.562664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 222.567831] RIP: 0033:0x45d5b9 [ 222.570996] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 222.578693] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 08:39:43 executing program 2 (fault-call:4 fault-nth:4): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 222.585939] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 222.593187] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 222.600435] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000018 [ 222.607680] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:43 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='tra\x00\x00=Md,rfdno=', @ANYRESDEC, @ANYBLOB="00000000000000fb1388e27e4eaba04bddcff40b9fdf5fa74a8c0fc663f5c06e3955b0c263edfb68908de2fc018000009bcf6a23b07fe7a63f939f1ccc2b52a2b350b9", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 222.676402] FAULT_INJECTION: forcing a failure. [ 222.676402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.691867] CPU: 0 PID: 12515 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 222.699760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.709113] Call Trace: [ 222.711705] dump_stack+0x1b2/0x283 [ 222.715340] should_fail.cold+0x10a/0x154 [ 222.719496] __alloc_pages_nodemask+0x22c/0x2720 [ 222.724260] ? trace_hardirqs_on+0x10/0x10 [ 222.728498] ? lock_acquire+0x170/0x3f0 [ 222.732470] ? pipe_write+0xb7/0xe10 [ 222.736189] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 222.741028] ? __might_fault+0x104/0x1b0 [ 222.745099] ? copyin+0xa0/0xc0 [ 222.748378] ? copy_page_from_iter+0x4fd/0x730 [ 222.752958] alloc_pages_current+0x155/0x260 [ 222.757360] pipe_write+0x920/0xe10 [ 222.760974] __vfs_write+0x44c/0x630 [ 222.764667] ? kernel_read+0x110/0x110 [ 222.768541] ? rw_verify_area+0xe1/0x2a0 [ 222.772589] vfs_write+0x17f/0x4d0 [ 222.776121] SyS_write+0xf2/0x210 [ 222.779554] ? SyS_read+0x210/0x210 [ 222.783161] ? SyS_clock_settime+0x1a0/0x1a0 [ 222.787548] ? do_syscall_64+0x4c/0x640 [ 222.791497] ? SyS_read+0x210/0x210 [ 222.795116] do_syscall_64+0x1d5/0x640 [ 222.798983] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 222.804148] RIP: 0033:0x45d5b9 [ 222.807313] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.814995] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 08:39:43 executing program 4: pipe(&(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/udp\x00') setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200)=0x5, 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="642ca566646e6f3d0000000000000b614a2dc9e1506768875e5600", @ANYRESHEX=r1, @ANYRES32, @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000140)) [ 222.822240] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 222.829496] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 222.836744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 222.844003] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:44 executing program 4: pipe(&(0x7f00000000c0)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000140)={0x80, 0xff}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) 08:39:44 executing program 3 (fault-call:12 fault-nth:25): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000001400)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x8001, 0x7a3ddd0c64bb50f7, 0x4, 0x7, 0x4, 0xfff}}, 0x50) socketpair(0x0, 0x0, 0x0, &(0x7f00000005c0)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000001c0)=""/58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) 08:39:44 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) write$snddsp(r0, &(0x7f0000000140)="595e5ca4c7ae8fe2562c52a516c144d7243084be65d9205ebdd5e53390d7f532b0cce15df044b3ed0219c399f6291ed227653ddf3041324aa67c2950f1a9b1a9818637985f95e6108ba743979875fa59bff5c8306a0926514f0a1aace1126342be77b040564b2502c0cf95b3751e18c03bf573c6d3d06dc1304bb8be220fdcdc4e5cfe0693df21197b806c660a33781d83e22efe8300c9b7f9679d386ddeba48827420191996b20f4219a170c31d582d18cd484cf5b7629ca15ab2dcaebf812aec9d5e6f98331cf60e0473e59ccef69b13f5496247e2822add9865fb0e65c60d3e4ee4402ab0930e03331978055e2d0917204c456e0be16e5e", 0xf9) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d66642c7298646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 222.981469] FAULT_INJECTION: forcing a failure. [ 222.981469] name failslab, interval 1, probability 0, space 0, times 0 [ 223.036608] CPU: 1 PID: 12540 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 223.044515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.053457] 9pnet: Insufficient options for proto=fd [ 223.053866] Call Trace: [ 223.061544] dump_stack+0x1b2/0x283 [ 223.065175] should_fail.cold+0x10a/0x154 [ 223.069326] should_failslab+0xd6/0x130 [ 223.073320] kmem_cache_alloc+0x40/0x3c0 [ 223.077381] skb_clone+0x126/0x9a0 [ 223.080924] __tcp_transmit_skb+0x1aa/0x2cb0 [ 223.085331] ? skb_split+0xa95/0x1140 [ 223.089134] ? sk_forced_mem_schedule+0x10/0x140 [ 223.093890] ? __tcp_select_window+0x680/0x680 [ 223.098469] ? tcp_fragment_tstamp+0xac/0x300 [ 223.098645] 9pnet: Insufficient options for proto=fd [ 223.102956] ? tcp_fragment+0xd64/0x1480 [ 223.102972] __tcp_retransmit_skb+0x6a8/0x1bc0 [ 223.102990] ? tcp_mark_head_lost+0x38b/0xaf0 [ 223.121166] tcp_retransmit_skb+0x28/0x220 [ 223.125400] tcp_xmit_retransmit_queue.part.0+0x145/0x6f0 [ 223.130941] ? bbr_lt_bw_sampling+0x1190/0x1190 08:39:44 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport='privport'}, {@debug={'debug', 0x3d, 0x3}}, {@cache_loose='cache=loose'}, {@access_user='access=user'}, {@mmap='mmap'}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_mmap='cache=mmap'}], [{@uid_gt={'uid>', r3}}, {@euid_gt={'euid>', r4}}, {@subj_role={'subj_role', 0x3d, ']+.\\\'!c-@'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'rfdno'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_lt={'euid<', r3}}]}}) [ 223.135608] tcp_xmit_retransmit_queue+0x4d/0x60 [ 223.140356] tcp_ack+0x2319/0x43c0 [ 223.143914] ? tcp_fastretrans_alert+0x2970/0x2970 [ 223.148838] ? __tcp_select_window+0x680/0x680 [ 223.153417] ? tcp_parse_options+0x18d/0x9f0 [ 223.157831] ? tcp_send_ack+0x6f/0x90 [ 223.161632] tcp_rcv_established+0x4fe/0x17a0 [ 223.166125] ? __release_sock+0xce/0x350 [ 223.170188] ? tcp_data_queue+0x3ac0/0x3ac0 [ 223.174512] tcp_v4_do_rcv+0x541/0x7d0 [ 223.178408] __release_sock+0x12a/0x350 [ 223.182377] release_sock+0x54/0x1b0 [ 223.186082] sk_stream_wait_memory+0x492/0xd20 [ 223.190672] ? sk_stream_wait_connect+0x530/0x530 [ 223.195511] ? __tcp_push_pending_frames+0xa0/0x230 [ 223.200612] ? do_wait_intr_irq+0x270/0x270 [ 223.204926] tcp_sendmsg_locked+0x1179/0x2ef0 [ 223.209461] ? tcp_sendpage+0x60/0x60 [ 223.213242] ? __local_bh_enable_ip+0xc1/0x170 [ 223.217808] tcp_sendmsg+0x2b/0x40 [ 223.221333] inet_sendmsg+0x11a/0x4e0 [ 223.225117] ? security_socket_sendmsg+0x83/0xb0 [ 223.229902] ? inet_recvmsg+0x4d0/0x4d0 [ 223.233863] sock_sendmsg+0xb5/0x100 [ 223.237566] SyS_sendto+0x1c7/0x2c0 [ 223.241172] ? SyS_getpeername+0x220/0x220 [ 223.245389] ? lock_downgrade+0x740/0x740 [ 223.249520] ? wait_for_completion_io+0x10/0x10 [ 223.254166] ? vfs_write+0x319/0x4d0 [ 223.257873] ? fput+0xb/0x140 [ 223.260955] ? SyS_write+0x14d/0x210 [ 223.264647] ? SyS_read+0x210/0x210 [ 223.268370] ? SyS_clock_settime+0x1a0/0x1a0 [ 223.272783] ? do_syscall_64+0x4c/0x640 [ 223.276751] ? SyS_getpeername+0x220/0x220 [ 223.281015] do_syscall_64+0x1d5/0x640 [ 223.284900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 223.290075] RIP: 0033:0x45d5b9 [ 223.293308] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 223.301002] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 223.308252] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 223.315508] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 [ 223.322758] R10: 000000000020c49a R11: 0000000000000246 R12: 0000000000000019 [ 223.330015] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:44 executing program 1: pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000001400)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x8001, 0x7a3ddd0c64bb50f7, 0x4, 0x7, 0x4, 0xfff}}, 0x50) socketpair(0x0, 0x0, 0x0, &(0x7f00000005c0)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000001c0)=""/58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) 08:39:44 executing program 3 (fault-call:12 fault-nth:26): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 223.416460] FAULT_INJECTION: forcing a failure. [ 223.416460] name failslab, interval 1, probability 0, space 0, times 0 [ 223.430484] CPU: 1 PID: 12565 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 223.438382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.447730] Call Trace: [ 223.450318] dump_stack+0x1b2/0x283 [ 223.453949] should_fail.cold+0x10a/0x154 [ 223.458098] should_failslab+0xd6/0x130 [ 223.462076] kmem_cache_alloc_node_trace+0x58/0x400 [ 223.467093] __kmalloc_node_track_caller+0x38/0x70 [ 223.472023] __alloc_skb+0x96/0x510 [ 223.475654] sk_stream_alloc_skb+0xb1/0x760 [ 223.479977] ? check_preemption_disabled+0x35/0x240 [ 223.484995] tcp_fragment+0x253/0x1480 [ 223.488887] tcp_write_xmit+0xf60/0x4e10 [ 223.492955] ? tcp_current_mss+0x1d8/0x2d0 [ 223.497188] ? tcp_fin+0x770/0x770 [ 223.500731] __tcp_push_pending_frames+0xa0/0x230 [ 223.505573] tcp_rcv_established+0x71a/0x17a0 [ 223.510064] ? __release_sock+0xce/0x350 [ 223.514123] ? tcp_data_queue+0x3ac0/0x3ac0 [ 223.518442] tcp_v4_do_rcv+0x541/0x7d0 [ 223.522332] __release_sock+0x12a/0x350 [ 223.526307] release_sock+0x54/0x1b0 [ 223.530017] sk_stream_wait_memory+0x492/0xd20 [ 223.534604] ? sk_stream_wait_connect+0x530/0x530 [ 223.539442] ? __tcp_push_pending_frames+0xa0/0x230 [ 223.544452] ? do_wait_intr_irq+0x270/0x270 [ 223.548782] tcp_sendmsg_locked+0x1179/0x2ef0 [ 223.553351] ? tcp_sendpage+0x60/0x60 [ 223.557205] ? __local_bh_enable_ip+0xc1/0x170 [ 223.561790] tcp_sendmsg+0x2b/0x40 [ 223.565329] inet_sendmsg+0x11a/0x4e0 [ 223.569123] ? security_socket_sendmsg+0x83/0xb0 [ 223.573873] ? inet_recvmsg+0x4d0/0x4d0 [ 223.577843] sock_sendmsg+0xb5/0x100 [ 223.581552] SyS_sendto+0x1c7/0x2c0 [ 223.585175] ? SyS_getpeername+0x220/0x220 [ 223.589407] ? lock_downgrade+0x740/0x740 [ 223.593563] ? wait_for_completion_io+0x10/0x10 [ 223.598239] ? vfs_write+0x319/0x4d0 [ 223.601952] ? fput+0xb/0x140 [ 223.605052] ? SyS_write+0x14d/0x210 [ 223.608757] ? SyS_read+0x210/0x210 [ 223.612379] ? SyS_clock_settime+0x1a0/0x1a0 [ 223.616775] ? do_syscall_64+0x4c/0x640 [ 223.620728] ? SyS_getpeername+0x220/0x220 [ 223.624945] do_syscall_64+0x1d5/0x640 [ 223.628827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 223.634003] RIP: 0033:0x45d5b9 [ 223.637190] RSP: 002b:00007fabc61b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 223.644879] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 223.652185] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 223.659433] RBP: 00007fabc61b1ca0 R08: 0000000000000000 R09: 0000000000000027 08:39:44 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000001400)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x8001, 0x7a3ddd0c64bb50f7, 0x4, 0x7, 0x4, 0xfff}}, 0x50) socketpair(0x0, 0x0, 0x0, &(0x7f00000005c0)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f00000001c0)=""/58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) 08:39:44 executing program 2 (fault-call:4 fault-nth:5): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 223.666686] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000001a [ 223.673943] R13: 00007ffd3dd2748f R14: 00007fabc61b29c0 R15: 000000000118cf4c 08:39:44 executing program 3 (fault-call:12 fault-nth:27): r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 223.773095] FAULT_INJECTION: forcing a failure. [ 223.773095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.801254] CPU: 0 PID: 12584 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 223.809159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.818510] Call Trace: [ 223.821100] dump_stack+0x1b2/0x283 [ 223.824738] should_fail.cold+0x10a/0x154 [ 223.828891] __alloc_pages_nodemask+0x22c/0x2720 [ 223.833650] ? trace_hardirqs_on+0x10/0x10 [ 223.837886] ? lock_acquire+0x170/0x3f0 [ 223.841855] ? pipe_write+0xb7/0xe10 [ 223.845572] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 223.850409] ? __might_fault+0x104/0x1b0 [ 223.854478] ? copyin+0xa0/0xc0 [ 223.857760] ? copy_page_from_iter+0x4fd/0x730 [ 223.862339] alloc_pages_current+0x155/0x260 [ 223.866746] pipe_write+0x920/0xe10 08:39:44 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r5, r0, 0x4, r6}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000680)={0x46, 0x8, 0x10000, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}]}) geteuid() r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x20000, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0xb, 0x6, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bridge\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7e}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'obj_role'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x41) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='9p\x00', 0x186070, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dont_appraise,obj_role=,fowner=', @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC=r7, @ANYBLOB]) [ 223.870376] __vfs_write+0x44c/0x630 [ 223.874088] ? kernel_read+0x110/0x110 [ 223.877982] ? rw_verify_area+0xe1/0x2a0 [ 223.882041] vfs_write+0x17f/0x4d0 [ 223.885578] SyS_write+0xf2/0x210 [ 223.889031] ? SyS_read+0x210/0x210 [ 223.892650] ? SyS_clock_settime+0x1a0/0x1a0 [ 223.897045] ? do_syscall_64+0x4c/0x640 [ 223.900999] ? SyS_read+0x210/0x210 [ 223.904612] do_syscall_64+0x1d5/0x640 [ 223.908483] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 223.913650] RIP: 0033:0x45d5b9 08:39:45 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 223.916816] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.924500] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 223.931765] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 223.939013] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 223.946280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 223.953632] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:45 executing program 2 (fault-call:4 fault-nth:6): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:45 executing program 0: chdir(&(0x7f00000000c0)='./file1\x00') acct(&(0x7f0000000240)='./file1\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x1, [0x7], [0x8], [0x0, 0x1, 0x6], [0x0, 0x1, 0x0, 0x3ff]}) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000900)=ANY=[@ANYBLOB="01000a00", @ANYRES32=0x0], &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @local}}, 0x7, 0x9}, &(0x7f0000000340)=0x90) sendfile(r0, r1, 0x0, 0x40d09) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000001c0)={r5}) [ 224.017163] 9pnet: Insufficient options for proto=fd [ 224.028645] 9pnet: Insufficient options for proto=fd [ 224.036202] FAULT_INJECTION: forcing a failure. [ 224.036202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.063027] CPU: 0 PID: 12602 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 224.070939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.080293] Call Trace: [ 224.082883] dump_stack+0x1b2/0x283 [ 224.086516] should_fail.cold+0x10a/0x154 [ 224.090668] __alloc_pages_nodemask+0x22c/0x2720 [ 224.095425] ? trace_hardirqs_on+0x10/0x10 [ 224.099662] ? lock_acquire+0x170/0x3f0 [ 224.103636] ? pipe_write+0xb7/0xe10 [ 224.107355] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.112195] ? __might_fault+0x104/0x1b0 [ 224.116265] ? copyin+0xa0/0xc0 [ 224.119551] ? copy_page_from_iter+0x4fd/0x730 [ 224.124133] alloc_pages_current+0x155/0x260 [ 224.128544] pipe_write+0x920/0xe10 [ 224.132173] __vfs_write+0x44c/0x630 [ 224.135881] ? kernel_read+0x110/0x110 [ 224.139756] ? rw_verify_area+0xe1/0x2a0 [ 224.143797] vfs_write+0x17f/0x4d0 [ 224.147316] SyS_write+0xf2/0x210 [ 224.150747] ? SyS_read+0x210/0x210 [ 224.154352] ? SyS_clock_settime+0x1a0/0x1a0 [ 224.158739] ? do_syscall_64+0x4c/0x640 [ 224.162691] ? SyS_read+0x210/0x210 [ 224.166298] do_syscall_64+0x1d5/0x640 [ 224.170184] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.175350] RIP: 0033:0x45d5b9 [ 224.178516] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.186214] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 224.193460] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 224.200705] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 224.207959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 08:39:45 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d5af4481fd2d9128d632e8e243cadba5f7d76571d24ee919453509c1016ab20cfd5624be5c7dd7a80d8cdbf5aabb47489d2", @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$int_out(r0, 0x0, &(0x7f0000000140)) [ 224.215209] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c [ 224.235084] audit: type=1804 audit(1599813585.360:33): pid=12612 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/133/bus" dev="sda1" ino=16029 res=1 [ 224.281498] 9pnet: Insufficient options for proto=fd [ 224.294252] 9pnet: Insufficient options for proto=fd 08:39:45 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x8, 0x6}) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x100, @broadcast}) move_pages(0x0, 0x2, &(0x7f0000000200)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000240)=[0xffffffff, 0xee980000, 0x1c, 0x9, 0x80, 0x0, 0x1f, 0x3, 0x5d3e], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ustat(0x100000001, &(0x7f0000000140)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000001c0)={{0x3, 0x0, @descriptor="46f87547fe132d3f"}}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x4, 0x0, {}, {0xee00}, 0x3, 0x3}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '\']\x1dRD\xc5\xe7\x86\xc5%[\xeb6\xf4\x14dl)\xec\xe1E\xe6\xdcq\x9937B\xa5\x1d\xd8m\xf2\xae|\xa9\x0e\x91\xa3\xb8\xed\xd8\x9b\xf9:K#q\x92^\nI\x04\xadN\x18\xff\x8a\x1e\xe5\xac\x05\xe0\xf6\x113\xe7\x0f\xd8\xfc\x1bw\x92\xe2\x00Q\xbf\xf9[\x99v8\xe2y\xe2\tg\x8f\x99\x04\xb2\xb5\xb22Ke#\x86B\xb1\xc5{\xe7\x94\x036\xaa\xdd\x8e]s4\x02\xc9i\x12\xf2\xafy\x9dJ\x1d\"\xb7\xb3\xa3\xc6\x19@\xdf\x9cm\xab\xd1|\xf1\xf6#U8S\f\xa8\xd5\x10\x0e\x1fo#\x13*\xf3s\xca\x1d\xd0\xefOc\xf8\xc0\xf0r\xd8\xe6_jx\x18\xb7Z\xb9\x1a&i\x83\tb\xf2_\x86F\xf9\x99\xdf\"\xc0\x89)W\x86\x8d\xed\x13\xac>m\xca\x86\xa1\xf2\xafvZ\xae\x1d\x8a\t\x19#\x1anJ6\xc7JK5P\xcfA\x18\t;\x14=)y'}}, {@fowner_gt={'fowner>', r5}}, {@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_role={'subj_role', 0x3d, '#\\!-:'}}]}}) fallocate(r1, 0x8, 0x4, 0x1) 08:39:45 executing program 2 (fault-call:4 fault-nth:7): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 224.331880] 9pnet: Insufficient options for proto=fd 08:39:45 executing program 1: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4a0, 0xe8, 0x0, 0x2d0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000140), {[{{@arp={@remote, @loopback, 0xffffffff, 0xffffff80, 0xc, 0x5, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={[], 0xc}, {[0x0, 0xff, 0xff]}}, 0x40, 0x5, 0xff80, 0x4, 0x4ed, 0x3, 'rose0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffff01, 0x40000000}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:device_t:s0\x00'}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0xf, 0xc, {@mac=@multicast, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x4ff6, 0x7, 0xfffc, 0x0, 0x15b, 'bond0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfffa, 0x81, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) pipe(&(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x38000, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000380)=[{0x1, 0xffff}], 0x1) semop(r1, &(0x7f0000000080)=[{0x0, 0xf800}], 0x1) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x800}, {0x0, 0xfffe}], 0x2) semtimedop(r1, &(0x7f0000000100)=[{0x0, 0x8}], 0x1, 0x0) semctl$SEM_STAT_ANY(r1, 0x4, 0x14, &(0x7f0000000040)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c726659646e2f3df2637e298d9ebbd256e50c72fb500da3dddb941361516e3ac05bcdfe007e7a659eb2cfb21d3150ff43264e905ac64668dd020067b4ec063790d027f0c2a8dfa2f92afa03c85e91c64fd1ff9ef7cabc3ee1e5fed78833b460e99731bbf5952646113de1a9ef86827767d92b868737368909d58d4df8e26fb3f5d043ba593f146adf6ef7950a17c8d12d84a952b8752c16c91a01e10564bcfe620d4be7754e8edf903a0cb7f046131f7336f95fdf7800c3493976aa3d2da57c53f8ce77bd3df58920665e83f1e4", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) [ 224.379317] FAULT_INJECTION: forcing a failure. [ 224.379317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.397012] CPU: 0 PID: 12627 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 224.404911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.414267] Call Trace: [ 224.416859] dump_stack+0x1b2/0x283 [ 224.420494] should_fail.cold+0x10a/0x154 [ 224.424648] __alloc_pages_nodemask+0x22c/0x2720 [ 224.429408] ? trace_hardirqs_on+0x10/0x10 [ 224.433651] ? lock_acquire+0x170/0x3f0 [ 224.437622] ? pipe_write+0xb7/0xe10 [ 224.441332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.446156] ? __might_fault+0x104/0x1b0 [ 224.450217] ? copyin+0xa0/0xc0 [ 224.453478] ? copy_page_from_iter+0x4fd/0x730 [ 224.458041] alloc_pages_current+0x155/0x260 [ 224.462428] pipe_write+0x920/0xe10 [ 224.466039] __vfs_write+0x44c/0x630 [ 224.469734] ? kernel_read+0x110/0x110 [ 224.473605] ? rw_verify_area+0xe1/0x2a0 [ 224.477644] vfs_write+0x17f/0x4d0 [ 224.481161] SyS_write+0xf2/0x210 [ 224.484591] ? SyS_read+0x210/0x210 [ 224.488195] ? SyS_clock_settime+0x1a0/0x1a0 [ 224.492578] ? do_syscall_64+0x4c/0x640 [ 224.496530] ? SyS_read+0x210/0x210 [ 224.500136] do_syscall_64+0x1d5/0x640 [ 224.504017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.509194] RIP: 0033:0x45d5b9 [ 224.512364] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.520061] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 224.527307] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 224.534581] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 224.541831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 224.549079] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c [ 224.559412] FAULT_INJECTION: forcing a failure. [ 224.559412] name failslab, interval 1, probability 0, space 0, times 0 [ 224.577831] CPU: 1 PID: 12608 Comm: syz-executor.3 Not tainted 4.14.197-syzkaller #0 [ 224.585725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.595162] Call Trace: [ 224.597752] dump_stack+0x1b2/0x283 [ 224.601385] should_fail.cold+0x10a/0x154 [ 224.605533] should_failslab+0xd6/0x130 [ 224.609506] kmem_cache_alloc_node+0x54/0x410 [ 224.613994] __alloc_skb+0x5c/0x510 [ 224.617602] sk_stream_alloc_skb+0xb1/0x760 [ 224.621902] ? sched_clock_cpu+0x18/0x1b0 [ 224.626029] tcp_write_xmit+0x1d3f/0x4e10 [ 224.630216] ? tcp_current_mss+0x1d8/0x2d0 [ 224.634429] ? tcp_fin+0x770/0x770 [ 224.637950] __tcp_push_pending_frames+0xa0/0x230 [ 224.642834] tcp_rcv_established+0x71a/0x17a0 [ 224.647317] ? __release_sock+0xce/0x350 [ 224.651355] ? tcp_data_queue+0x3ac0/0x3ac0 [ 224.655665] tcp_v4_do_rcv+0x541/0x7d0 [ 224.659543] __release_sock+0x12a/0x350 [ 224.663497] release_sock+0x54/0x1b0 [ 224.667188] sk_stream_wait_memory+0x492/0xd20 [ 224.671749] ? sk_stream_wait_connect+0x530/0x530 [ 224.676568] ? __tcp_push_pending_frames+0xa0/0x230 [ 224.681559] ? do_wait_intr_irq+0x270/0x270 [ 224.685869] tcp_sendmsg_locked+0x1179/0x2ef0 [ 224.690350] ? tcp_sendpage+0x60/0x60 [ 224.694174] ? __local_bh_enable_ip+0xc1/0x170 [ 224.698777] tcp_sendmsg+0x2b/0x40 [ 224.702303] inet_sendmsg+0x11a/0x4e0 [ 224.703189] 9pnet: Insufficient options for proto=fd [ 224.706096] ? security_socket_sendmsg+0x83/0xb0 [ 224.706108] ? inet_recvmsg+0x4d0/0x4d0 [ 224.706121] sock_sendmsg+0xb5/0x100 [ 224.723723] SyS_sendto+0x1c7/0x2c0 [ 224.727339] ? SyS_getpeername+0x220/0x220 [ 224.731556] ? lock_downgrade+0x740/0x740 [ 224.735704] ? wait_for_completion_io+0x10/0x10 [ 224.740354] ? vfs_write+0x319/0x4d0 [ 224.744044] ? fput+0xb/0x140 [ 224.747126] ? SyS_write+0x14d/0x210 [ 224.750854] ? SyS_read+0x210/0x210 [ 224.754466] ? SyS_clock_settime+0x1a0/0x1a0 [ 224.758859] ? do_syscall_64+0x4c/0x640 [ 224.762809] ? SyS_getpeername+0x220/0x220 [ 224.767019] do_syscall_64+0x1d5/0x640 [ 224.770888] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.776070] RIP: 0033:0x45d5b9 08:39:45 executing program 2 (fault-call:4 fault-nth:8): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:45 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x1, 0xfffffffa}) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000001c0), 0xff71) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000080)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'vlan0\x00', 0x7}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) sendto$inet(r1, &(0x7f0000000300)="0c268a927f1f6588b967481241ba7860ac5cf65ac618de8a2e4895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7bad3d88fecf13a1a7511bf746bec66baf3ea940206a2bc00c6e6dae9fa6cdef387f68d526ad4974d7ae8e752e076185983414937c713ccfadb69b39a892c970000000000", 0x81, 0x20c49a, 0x0, 0x0) [ 224.779237] RSP: 002b:00007fabc610cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 224.786922] RAX: ffffffffffffffda RBX: 000000000002d140 RCX: 000000000045d5b9 [ 224.794172] RDX: 000000000000fe6a RSI: 00000000200012c0 RDI: 0000000000000004 [ 224.801466] RBP: 00007fabc610cca0 R08: 0000000000000000 R09: 0000000000000027 [ 224.808757] R10: 000000000020c49a R11: 0000000000000246 R12: 000000000000001b [ 224.816021] R13: 00007ffd3dd2748f R14: 00007fabc610d9c0 R15: 000000000118d26c 08:39:45 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x222000, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 224.872407] FAULT_INJECTION: forcing a failure. [ 224.872407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.912605] CPU: 0 PID: 12643 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 224.920518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.929872] Call Trace: [ 224.932473] dump_stack+0x1b2/0x283 [ 224.936103] should_fail.cold+0x10a/0x154 [ 224.940257] __alloc_pages_nodemask+0x22c/0x2720 [ 224.945016] ? trace_hardirqs_on+0x10/0x10 [ 224.949363] ? lock_acquire+0x170/0x3f0 [ 224.953329] ? pipe_write+0xb7/0xe10 [ 224.957025] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.961848] ? __might_fault+0x104/0x1b0 [ 224.965904] ? copyin+0xa0/0xc0 [ 224.969178] ? copy_page_from_iter+0x4fd/0x730 [ 224.973807] alloc_pages_current+0x155/0x260 [ 224.978198] pipe_write+0x920/0xe10 [ 224.981806] __vfs_write+0x44c/0x630 [ 224.985499] ? kernel_read+0x110/0x110 [ 224.989412] ? rw_verify_area+0xe1/0x2a0 [ 224.993464] vfs_write+0x17f/0x4d0 [ 224.996993] SyS_write+0xf2/0x210 [ 225.000421] ? SyS_read+0x210/0x210 [ 225.004044] ? SyS_clock_settime+0x1a0/0x1a0 [ 225.008451] ? do_syscall_64+0x4c/0x640 [ 225.012410] ? SyS_read+0x210/0x210 [ 225.016015] do_syscall_64+0x1d5/0x640 [ 225.019893] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 225.025074] RIP: 0033:0x45d5b9 [ 225.028250] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.035945] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 225.043208] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 225.050453] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 225.057700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 225.064945] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:46 executing program 0: chdir(&(0x7f00000000c0)='./file1\x00') acct(&(0x7f0000000240)='./file1\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x1, [0x7], [0x8], [0x0, 0x1, 0x6], [0x0, 0x1, 0x0, 0x3ff]}) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000900)=ANY=[@ANYBLOB="01000a00", @ANYRES32=0x0], &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @local}}, 0x7, 0x9}, &(0x7f0000000340)=0x90) sendfile(r0, r1, 0x0, 0x40d09) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000001c0)={r5}) [ 225.090368] audit: type=1804 audit(1599813586.210:34): pid=12622 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/133/bus" dev="sda1" ino=16029 res=1 08:39:46 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x1, 0x6, 0x800}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472070000000000000066646e54be", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 225.152514] audit: type=1804 audit(1599813586.270:35): pid=12662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir670745099/syzkaller.UCOwaO/134/bus" dev="sda1" ino=16029 res=1 08:39:46 executing program 5: pipe(&(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e, 0xffff}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x84, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00\v\b', 0x0, '\x00\x00`'}, "ccbfc12abc282c27820fd9118600820e011a41cf0167657fc01ca7d70094ce7f17e89fb5f1df4c366b67856d210a24c3df6373d0ca47aac2885da778edbdc1e5bde967a600ca0e2ba1e34aebb68aa9431062ffe5400000000000000100"}}}}, 0x8b) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) 08:39:46 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000780)={{}, "9aed79e7803a21f3112d3f583127b47e42b77d3c83acfdddcc500dabf6f8aa941bf38664bb3639253d6eeaf463c063fe7027576d617c3827cf2f2464effccd13c170be155fcdfd1bf901cb454f26d41dc41033253ec309d2119b1130f17b5a27d446d97cad86fb55c41b0bc896f6b7354af871a60691a58bf08e1b1ca547e1ef9921a68b9dd790868706b200df6484f7c119a206f848911e8f14dd3a1eb85404a9bbab3ad643ad8e97a2c1a5dd3dbd8ec589681b4e04c1d4305d3f8e4e4a9c964a9c079dcd8bca87ba652d32bd63351cf6fcaa4a86e24ffa9ae1a6ea6901c46c9fbbaf6d9ea62469ab4ff23b0b0ffbf78911b65fee7598e03ad71020a802696693610d1e1bef44dacc2ba522c5fef6e55adb7141bf43d067edf59664c3b9dd12edb51dcb085c2d902e742d6c2811d3fc31b29717507688798b4b0c1d8ee6d8b5d59214ca241c4c9cfb85716d1f3e377050079e7ecf9aa0170f629a4dacdffe184007cd233dcb25a0546977850ee4ded85061e4944f036b08c7bf6c196c74d24b49ab49dfe1c7ed7289f00ca7d743fab0a2b653f68ae0fede16e2e5e940abbd6441e1769c7be215d805162b1b8b83dd52de2e81f2a3b345aef54b8ec8dc6d0ee47f873148be482fbbd7f9bbd1549d1c9c354266c4dbaf70c95e4298e292a7fa67d8eb91d191971f31a489682862d1daeff227f2e5f7a77bb2b7a33161ef01e03fb1e350cbc9cee38f7645eed8f1d68613b94bd73a35e50946bbd2906121270b41cdd02a0020507ddd1fdd3ca98336f0d772cd2e1e8f5195a43b6ba1d2e87c0aa174eef08ca071dde7fc7d30324ad72f7088dbaf66cce04f21645d7abc48e994d15ec9ee1eb8f18db2454ebacc75615d41d0be4350cf3aa8f2f162146e7db978facbd7c6a0cb8829a977b2b4d0d9cf724273a019aa5c19eebca1ad55fca4a457bc2160ccb2c388fcf7e0e127350f14c882747406b46084b5277316461d96e5abb298b7aa2e789f090aca001325bf94a358dcf12d38da63d31f49f3156118358db5bddbcd049b6c35f8cf10437846179fbc817bf18a1922b5ae4581c486e1b6d584aa9e61c929a436125479490e9fac90a5c819fe9fd08ba214ecb6d33c228e6dd0afc1e8a4c5ff6cc4abe9044ec55744023d781bb0e2704a17bec5c8a6ab48a28f92213accc5b3bb41f32ea7ade2e47393b22b4ede02395217be0c9ed834b43ec2d296facb5511ba1c4c098040ba3eceefadcf0aae6289587aa8dbb37d8553734bf6ee894badfdcbd6661fce3d7f50b5a9ac63ee16165302b5f583cf42b7b28548d5876a3ec7a9b6ea41131b743adb15a7c3bfdf9c4d64a00b5a7b2fd4140e2d09894298448086250a90eb9c550175befb147d4cf932e4a7d1ca361a809a91e0ec0426d10effc7d65d10569beca512e62f6c11d258e4994b4cdbb4fa8323047be09df7176c6d2ffabac4719c4f0abf08b4b32c90057d6f522b5ee341267cad910f2cfa62bce7ff467a0da88727da3f2ba2131685c45335c8ca0744cb97f5c0be1dedcf49ac4801a1efa126ed2a77863795b685073174406573e4259096afc223247603f617ade5c9c85dace490afbac7f70da9d02fb05f5776eedd6ba167c67f9cbfd7cf2bfedf667858e48537b4762ae518250c189d43a1064108f1b7ba89f12a989def8f88f33afe3325b51a1ae6220d2484ee371e16ca1a48bccf635ecfad7370b2de978dda16e65a1447a535714ffec7cd93687e2878166ca559190f79708ad3da1d17825c8d1e837e07f34f0dd4548c1dd12d27ee84780a65524091fcce079038c395e1e0912b2e02ea0998ec86f055a4ac77f123566ed10b8e3335b571a16b5d5b09a486791d2c720801ba1f066e005a323d20bb1f906d230aa05d67f4e87ee11a2030892e97db4abc11ae947c3f98df5a63cefeb0e67065accfe14d0be134184e30d6aa53b9ec2e3330433f68ec3e75a2c6a34ffab67f30e9071f1c8b77b8f64e952e1d23025ff32b31f9acc8bd15da88b19b49f7243d218a317f5705bc0653f2d1cc59849535e9b6d49b2e1ca355e67bf1c9da0bf80bd1fee9cf58a9f5a41e4f4448d9321724c8fc89a22dbe5a437b604020e655bec20e92cdf8a8bc46ec5118406549ffde363be3d969c5231dedc2f0346b841183a153c1bea5d555aadbf65b98d6ddd8c68b26da8c1ca6a492c76fd410fa82eceba65dd7fe17c6f51032ede82cfd162de75a6d618fa9f4b1851fb7578ded4b57445346f2a2939b0b0a95d2683205f6182fe6090fafb2439661fa5039ffba7bd5094cd5cddf162a751937af4cc892c9b975570db5b78ee902be0dc41dcba029d6b29c2e54afded44f94e6a1318ac6e9ca085e0658c3464abf9e8e3dbaa1cbf7e82b472b8a21f1b7c9b68d5e87d1b33c38994a2b4b02b7b7edbc420d85661231cc69bac57f6597bf5393a64bfe28d792a368a5f062ada49750b69e744e00a4a05021f4906a635022c97e3212a65f20865eaea247454643228ed56bf86ab683075041e627f29d625aefbcbadc527927a58344a9576edba5c8e3792eca2e7aafa1f820825a89385cc91a1544a60662eb10684600ee020c7067c4bdddc5566655762d9a8cb4877109197e845f3dcfd9e97b6adac25b3a42af68ef972866ff9020896e23953849a0ac814b2699bde61bdf4ca7030c36df66cc9c1acbbee3273debe9388b81e641eb6cff8b6d1c69cdc15219460324a52f0fcfe44350ef19de5145e57a382b69a6b62a3b333d7fa95eeb2bf98ec475033d39b66df76195e8c256cf6423a9fef7fa2c50c39821d4913e5b1166ebb897eef5c2a5ffac92084912a178d24822998ef781ca2f0e08adec0a7d1ec8a3b01420c1630f18dfde59bbc442a818ab9bcf2d79c59e49df94285dca360f079c852a9cfc8ecb7ffe44a236ce1b53329e8e16a7413d344ebd87987e0e7653e2b81de97ee42c651b245d90a5e6274840ce2b5492bcfbb42dadb00ef505bbb0555463d66f8df0362d366b4750713a5efbfe0c2d8419df170512cb8e84ffd66ef850f9496fc56547511413966ecee09ecb384d61e335f62cc1ad4db9a610255419d093f9e275eadf1d85aa2573f6bb0da95e9a4a1648c3aadaefd822574be4485e1560413b1959fac19c2d8eb9a819660103db9a43e353642b872e11e1b0551f89d97bb7b4ae88165281a6e6f15cde85e71888e6eb9ed397f59493333ad4d88b43daa729f2523ecc89cd9d46678ed57406f3eadb9f41b21bd9ce6d3de08c787fe1b1f6c71a2f317c8b0522a2adc4dc67db71574ba902934d1e13a58fa15fa6aef79b447e7855e5d484055bfce67fb317a403adad54e2344e2f9a5770370407aea7ee71739ad9ff1d420219a878ab89c300963b8bc80cf04b25e9f04899c998e0e13fa7639c5fbfa7fa7f4195bcffae776719d254d2a8212f616659b99dd0baf10712383c64efa55df07e8a120f0d669b82b35d4780537f045da2e4e8f54ce036778420f58459f82b9a71183e22e86b6db681aa988bdbc5db45e836eb74d588650d050f1179a9aff07ef74511381f9b3e58145a61f89f1b88a2c09d0fb3b3aff8cbea3d2e16fb6db8da4583ac128c1abd057c0510cfa87d7a00c74d46a452bacf03ca68ed18d9f720123a6455ff365bdca28ab0eec14780f414acdab3e109d54353940846406ca792fab01cefa143d878f61935d276fa1f15e38db24806639d7bba5418cd6fb8f24c2e0df312357aad1f5943bd9eec5f7749fdd72a7773aebb916085c1d88856d87049698c2617b41dcb7e70564fa5d9940d658217c0a43353902f84035138ff0d3d53bff6fe9fc419fbbf3267cbf85fa4d20ba18d8018cbbdbbf0e689ccd5708aac3ac9e935592fabdb3483b2a40f6470fd3d66009c3ef85664bdafca195ef02316ef587ea4ba5573549e5b66f34670d5709dccb0ec225e74b40feb0d3dd7e37e380d4de611066ec0585666355476d9a648a7b368dbf7f6d478d265bd402929a23e162d5507efbeb9bbd3de65abd06b3d23a8404b45055456e4b51e42649d4a5ed276bb92cc10bf8ebd5bdc7af4e414049d268de456c37ace1b539d432725b5c7a9e381d31ad6dcd7a46ea42fb80f21d3cb1b9b4bd49eadf98ed14f0ad8ce1ddb034f1f7ad83b4f169602b7d16bdb1ba4f683eff92e85bd631467c2eecfa58aae1912c07efe3f574af794dd3257346d4d3cd7ab2f2e03a773c0ea31a501a4f87de7d4244a052ba18ebd522c7252d9c5bcaf962b1282fff2108c1bdce74e04ce0b6b7d7efcbd9ced6fbd7e90049dc2801f857d49121c7474467a66d698cbe3eccec6ef27debff988faf6686c338e9156e8dcdaf235db5de6a538dc775cb9ad6e0440bac0f18ac363648bf97dfe481cef05e7274d19cadc7724c7c0e2f0de557f5cbc1bee528465a193aff910803b04b8d2009313cb467fbfb85aa8990a90ef52cddee2aa39f6e3dd37d49758ae13cfa22fc77030c7786d91abdb6ed79248910742e6067ff14a0bfa8a9c19813ecb204e11f0af29d35ce110936a2a0afe12d783ae9fa79fde9b715d36592e9c9565c9c49f91a6c4098462ddd3054badaba10f26b97b4acbbd64a8b1c7cc03a8d092601c417bbfff9bbdb4e732ee431304faa9b1350519225229371cbd8efc712c8c2799dc71ee943fa0f0ef7d9f4281e13c9ccfbd73447348b2e08d6f06accea2902b87bed9677ca8f78ab643eaddf23808fe1b0322a6c3278e0b09c2dabb8f1b6b1d1e6c42a6ba5c30821ac8223bc4975d394006f440a6f1d31f4fccc22227d6364e2bf0f988cbda74e3d955a29b064d571f83f1df4e7925d1b540180ec0dded806a969a75914a8531edb8560a3a5599d83c71e146f5c637b736264c7eb9d38362b4cf2beb2651c5f69f62df3fbb5ce6db167f2187ac42f6e31c70ceee46a5ffe326dc20d42c8bf6a1153f7989f771c3ba1a906e82137adee0603a8141a97b65bac3e2f2d51795a05c12a240981c0e809eaf3c20919a3ad7d70dca7d34a6147ee0154ea7b9f41350d7e79a312551eb40d117d6b2ee316c937ff83be6127c74d815a9ea0c951e74a24b59534e593752cf4688a86f92feb181d498197495164f4512cdbacb994db84626811b95ddb6a3dd203a2989e9c1a277f81df1d746b23f6159dd59c5833e53c2664866ca3398bbf2b9221df2df21668ad4fcddd0be0fce94deae075fcbd1835583b85a78f4851c969aef6ed6543583d4489451434f87399eb6c7415908930e90142e5aed0d61a9b2d8e2108b46d979d62b983312d8503b97eb93e87fb59b778876a3d4ca76885036ef35f4ba027f6581d97f4d1410e2a584925d4a58deb3daf34b710c15f0193bc4f7c105c8f85509e0ac579c3f5a1a5ad9a1edc12cd0bb6e96b9e8a035a83fa4265663c3ed4e58d2aec2351ef460c1e7510a96b76859b33af1f55ccb4032bf2715e83c63655661dcd94bfd2020520107e43063ca232e929a6f36bbcb07b8a91b4aeec303c0e4bba0e17d433eaa924fe33005b9169a777e004368e89b911ac7947bfd289bcc0af78605a3f4b86c77013a4b1e40e1f6595bc95e158b40c7aeb148d693fab129058ff912618c7a343484a188b4b95cb07d0f92b357625c737e131f96d7f7ce369aae85e2b064fb1c103437e00104d20a1311b4eeb904edd6addf9d92b66e84c8ce2fc0493eb6bbe38b5375d0a085d0694c4d04976e91d5584e667c7dc1043e904da5eb912972bd8bcec49c9e78c6edf1ef4a1a00800e36dcfab60135f0200e49d912b151b22ab68e7b4d3e87"}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 225.273457] skbuff: bad partial csum: csum=126/65535 len=129 08:39:46 executing program 2 (fault-call:4 fault-nth:9): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 225.689254] FAULT_INJECTION: forcing a failure. [ 225.689254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.708094] CPU: 1 PID: 12689 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 225.716084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.725434] Call Trace: [ 225.728026] dump_stack+0x1b2/0x283 [ 225.731663] should_fail.cold+0x10a/0x154 08:39:46 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 225.735847] __alloc_pages_nodemask+0x22c/0x2720 [ 225.740675] ? trace_hardirqs_on+0x10/0x10 [ 225.744968] ? lock_acquire+0x170/0x3f0 [ 225.749255] ? pipe_write+0xb7/0xe10 [ 225.753605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 225.758816] ? __might_fault+0x104/0x1b0 [ 225.762898] ? copyin+0xa0/0xc0 [ 225.766182] ? copy_page_from_iter+0x4fd/0x730 [ 225.770919] alloc_pages_current+0x155/0x260 [ 225.775466] pipe_write+0x920/0xe10 [ 225.779088] __vfs_write+0x44c/0x630 [ 225.782789] ? kernel_read+0x110/0x110 [ 225.786668] ? rw_verify_area+0xe1/0x2a0 [ 225.790708] vfs_write+0x17f/0x4d0 [ 225.794228] SyS_write+0xf2/0x210 [ 225.797658] ? SyS_read+0x210/0x210 [ 225.801261] ? SyS_clock_settime+0x1a0/0x1a0 [ 225.805653] ? do_syscall_64+0x4c/0x640 [ 225.809610] ? SyS_read+0x210/0x210 [ 225.813220] do_syscall_64+0x1d5/0x640 [ 225.817095] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 225.822258] RIP: 0033:0x45d5b9 [ 225.825428] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.833128] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 225.840383] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 225.847629] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 225.854875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 225.862121] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:47 executing program 3: r0 = socket(0x2a, 0x3, 0x4) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="00e3ffffb6ca3096717242ec448c5f99311e1c440d3faa475564dee643d118a70dd7f734d7e6af7aab2fb0cee45bb36cebd5bcd3ae9648e1558d3e5b782936ed56195959b067cdaf5aed593ebaabcf818b2137c2d6e0fe0ed15bb6ffff9d642116fc5d80a8d13b620210e817b097b405d33c80f1da2d0a3b5ee086662733a8f40b285c741f28c7de760a689ec408c32f94316a2cc3d2389ee08a54fcee5729d651ed743a4d0236880b5646c56cc4e1e3aeaddec1af047a8e51dd47a29f20f9e967610dbdd308c08fe248600957e9593736fa385fa5c468f2e9438e5a915ab55f622aa355a42a32b14778571197068b7d9899", @ANYRES32=0x0], &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000980)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000a80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ac0)={0x49c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x641b}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r5}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x414}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xb7d}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5c4}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r5}, {0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfc}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:47 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc60}]}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @private=0xa000102}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 226.128433] skbuff: bad partial csum: csum=126/65535 len=129 08:39:47 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0x32, 0x8, 0x200, 0xfffffff7}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:47 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) [ 226.280684] audit: type=1326 audit(1599813587.401:36): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12725 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 226.327703] 9pnet: Insufficient options for proto=fd 08:39:47 executing program 2 (fault-call:4 fault-nth:10): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 226.511830] FAULT_INJECTION: forcing a failure. [ 226.511830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 226.524150] CPU: 1 PID: 12734 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 226.532057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.541548] Call Trace: [ 226.544135] dump_stack+0x1b2/0x283 [ 226.547851] should_fail.cold+0x10a/0x154 [ 226.551989] __alloc_pages_nodemask+0x22c/0x2720 [ 226.556724] ? trace_hardirqs_on+0x10/0x10 [ 226.560938] ? perf_trace_lock_acquire+0x104/0x510 [ 226.565852] ? pipe_write+0xb7/0xe10 [ 226.569554] ? HARDIRQ_verbose+0x10/0x10 [ 226.573595] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 226.578415] ? __might_fault+0x104/0x1b0 [ 226.582511] ? copyin+0xa0/0xc0 [ 226.585780] ? copy_page_from_iter+0x4fd/0x730 [ 226.590364] alloc_pages_current+0x155/0x260 [ 226.594775] pipe_write+0x920/0xe10 [ 226.598397] __vfs_write+0x44c/0x630 [ 226.602089] ? kernel_read+0x110/0x110 [ 226.605979] ? rw_verify_area+0xe1/0x2a0 [ 226.610037] vfs_write+0x17f/0x4d0 [ 226.613563] SyS_write+0xf2/0x210 [ 226.616993] ? SyS_read+0x210/0x210 [ 226.620607] ? SyS_clock_settime+0x1a0/0x1a0 [ 226.625001] ? do_syscall_64+0x4c/0x640 [ 226.628962] ? SyS_read+0x210/0x210 [ 226.632568] do_syscall_64+0x1d5/0x640 [ 226.636444] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 226.641659] RIP: 0033:0x45d5b9 [ 226.644839] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.652538] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 226.659838] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 226.667101] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 226.674356] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 226.681603] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:47 executing program 4: pipe(&(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000040)={0x1}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000003c0)={0x7, {{0x2, 0x0, @local}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x87ab, 0x30}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbff, {0x24, 0x0, 0x0, 0x0, 0x3, 0x63, 0x200, 0x7, 0x0, 0x8}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24044058}, 0x240000c0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000500)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)={0x3, 'rose0\x00', {0xe5}, 0x6}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xb732}) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000140)='./bus/file0\x00', 0x1f, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000d40)="7b8dc874046be317a5052eac44eb7fed1eff6a5f666b7c8e4d0b3f731aedbc8e566353caebcc85bf4ea8d6e1b97df931b9f0d5e3728e6f636926cb248f78495d31abbc12162c26", 0x47, 0xffffffff}], 0x20000, &(0x7f0000001300)=ANY=[@ANYBLOB="6769643d7725443ec30dd970c1d2f40200000000000000dbdd17a5caa56ef13f19ec37c058d33405933e5c20f87b03f2c82e33de74952f71d49581dac2b46e95e0832fbebccec8f66bee2852431052012c3a2fd9ca725eab902340af49f70247c67b060eb75784161ac3743ec62ee6494ecf4cb51f91d4e754", @ANYRESHEX=0xee00, @ANYBLOB="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"]) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3fb, 0x0, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) uname(&(0x7f00000002c0)=""/226) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="fe", 0x8758}], 0x1) 08:39:47 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="20a04aedf29bc2f262a76def9fcaa7ccd649e8a52727ea269894f72c935dd7d4ec79882d03397a161a1f98f51385b86639b666437a5d35831da66f584cbf4477a64d4e83a66287a233c315efd50ead487b0eccd89adbaf3b5a67c8893bcbecaf069e83c1f60303d89193f6b1a2caee0e2f540cf2422b6c354e2b14e79dc603275b151cb57a26afcd78ed5a35fca5c15951f099224f59d7aa40959feb65e03a4482e1f3dd6b47e5d538483b687259795be83606e7abc0b2224ad2658f1c30299a31100acc6b5514e4748b58a1", @ANYRES16=0x0, @ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x20008800}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = dup(r3) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000180)={0x34a5e763bc1e53f2, 0x4, 0x8, {0x401, 0x6}, {0x8, 0xfffd}, @ramp={0x5, 0xffff, {0x0, 0x6, 0x1, 0xfffe}}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 227.071024] audit: type=1326 audit(1599813588.191:37): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12725 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 08:39:48 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) connect$rds(r3, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000002c0)={0x2, &(0x7f0000000180)=[{}, {}]}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x1, 0x0, 0x6, 0xffff, 0x8, 0x44b50a1c}) 08:39:48 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffff}, {0x9}, {0x7, 0xc}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2000001) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) [ 227.138763] 9pnet: Insufficient options for proto=fd 08:39:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x1019, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2404, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) rt_sigreturn() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) sched_yield() bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f00000001c0)=""/204) r3 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, 0x0, 0x20040831) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e25, @empty}, 0x10) 08:39:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r4, &(0x7f0000004500)=""/4100, 0x1004) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) write$cgroup_int(r5, &(0x7f0000000000)=0x4, 0xffffffffffffffb4) 08:39:48 executing program 2 (fault-call:4 fault-nth:11): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 227.331653] FAULT_INJECTION: forcing a failure. [ 227.331653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.343837] CPU: 1 PID: 12790 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 227.351725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.361078] Call Trace: [ 227.363661] dump_stack+0x1b2/0x283 [ 227.367273] should_fail.cold+0x10a/0x154 [ 227.371411] __alloc_pages_nodemask+0x22c/0x2720 [ 227.376201] ? trace_hardirqs_on+0x10/0x10 [ 227.380416] ? lock_acquire+0x170/0x3f0 [ 227.384373] ? pipe_write+0xb7/0xe10 [ 227.388070] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 227.392888] ? __might_fault+0x104/0x1b0 [ 227.396932] ? copyin+0xa0/0xc0 [ 227.400189] ? copy_page_from_iter+0x4fd/0x730 [ 227.404753] alloc_pages_current+0x155/0x260 [ 227.409139] pipe_write+0x920/0xe10 [ 227.412751] __vfs_write+0x44c/0x630 [ 227.416443] ? kernel_read+0x110/0x110 [ 227.420314] ? rw_verify_area+0xe1/0x2a0 [ 227.424355] vfs_write+0x17f/0x4d0 [ 227.427874] SyS_write+0xf2/0x210 [ 227.431305] ? SyS_read+0x210/0x210 [ 227.434907] ? SyS_clock_settime+0x1a0/0x1a0 [ 227.439300] ? do_syscall_64+0x4c/0x640 [ 227.443248] ? SyS_read+0x210/0x210 [ 227.446853] do_syscall_64+0x1d5/0x640 [ 227.450720] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 227.455888] RIP: 0033:0x45d5b9 [ 227.459073] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.466779] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 227.474024] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 227.481267] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 227.488513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 227.495771] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:48 executing program 4: pipe(&(0x7f00000000c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40401, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x1, {0x6, 0x30, 0xc, 0x14, 0xa, 0x9, 0x5, 0x3, 0xffffffffffffffff}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x4400, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @initdev}, &(0x7f00000001c0)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0xbd71, 0x90202) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000780)={{0x0, 0xa05, 0x7, 0x6f4, 0x80000000, 0x80, 0x5, 0x15, 0x72e, 0x6, 0x9, 0x5d17, 0x4, 0x7f, 0x800}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/llc/core\x00') ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@null=' \x00', 0xf, 'veth0_to_team\x00'}) setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000340)="a90e96f7e50b394df1f97811fb2d0d85146b86f3a90b14d4343237387844527bb53c0821a4e5b8adbab4edfb4ec9971e0100b39e3f6c40b75283d12ceb3a7017c6e9ec277769ce5fac9d4e52d3727755d60ae32d526836f5a1e48e17e6a735751d6955f485290a4225113d07be609f5e99fcc46bae77019a4704d61136e4", 0x7e) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r5, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d9777e0361396a5f69ce196ffc991081d8c38c15993744b64be09e95ce1aab6d5fbc9ba6cfa6667bb22228fb5ddf449697b949e5e4f80d8f6870606798190673aa1d9634707d2dabc4205ad9efb975e24d8277072d0", @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d40dc352fd6f3b8e63fa393417f5782e7beebbcb595ce6cc16089567d27ef61013b7a3ce1c49ade4c2da5", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 08:39:48 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wffno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:48 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/220) 08:39:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000000000499d17924eeba71a4976010092a8000000000000000000012e0b3836005414b0e0301a4ce875f2e30000000101013c5811589d70a866fd792bbd0e5bf5ff1b0816f3f608000000000000a349c6764746d1596d3a09ffc2c6540000000000000000000700"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x100000eb}]}, 0x10) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffed2, 0x3e8, 0x1, 0x70bd2a, 0x25dfdbf9, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040054}, 0x40010) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="7f77a79cb41d2d9724635c2fffff0000000000008a3a13325910f206c8ef26a2ab67e26a33f9df977f5028c4d74da5fd62f3cf39a43a5e1244323ea0946326ffe29aca85bdb8dd582360717bb44c7fcc1da5ba29812876681bf53a3ee7325b069a3e65475fe9cdf2342756ce4bc64ed5014020a78885e84acc15bd9401a8e3c1f7f3d36304d4283b6c4d34b498b00f4ebadc82f889825a04b5983f", 0x9b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @descriptor="df96b5bccef383cb"}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 227.597376] 9pnet: Insufficient options for proto=fd [ 227.607540] 9pnet: Insufficient options for proto=fd [ 227.632185] 9pnet: Insufficient options for proto=fd 08:39:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8400, 0x0) r1 = dup2(r0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0x8000, 0x1, 0x4, 0x100, 0x101, {}, {0x4, 0x1, 0x81, 0x3f, 0x1, 0x3, "9903b4bb"}, 0x1, 0x3, @fd=r2, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 08:39:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) r2 = accept(r1, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000000300)=0x80) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000340)=0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000380)=0x1) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = dup(r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x40811) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x40, 0x0, 0x3, 0xef}]}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x20c49a, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x474400, 0x0) read$FUSE(r4, &(0x7f0000001340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x1f, 0x7d, 0x0, 0x7, 0x1040, 0xfffffffb, 0x6}}, 0x50) 08:39:49 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0x3) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) connect$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, @fixed={[], 0x11}, 0x55}, 0xa) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x140e, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:49 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:49 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000140)) 08:39:49 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="544b6d7414b82bda30f2d7dd2505f9fa8340d5044c01092a777df9a0c2dad17ab62805f4d392708c4e7806571afa0ded05372bc900f375a5b86a638a64c0678c95b03a35d2606d022881d429d82b73706b596e2bf4fbcba4cf2ce37c64b81f6172a45b6ff04804a6b2b3296ece6d7ed18dc205e78d74e8561385cf810509f7938696fdd860dd36ccaec79eba5aa5923a9c345e823fc48976fc5ee7b0f398f69f675ba033c26d15995ab5985c0277ea4ba4bb883e0078f156a2c4110a3710843090f79bf14db7ddbf05f57ce4be75e2dc5f82d130d5b3447bc41d8c4e992c6011eeea56498c78abddb7c1a7a1"]) 08:39:49 executing program 2 (fault-call:4 fault-nth:12): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:49 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ptrace$cont(0x1f, r0, 0xfffffffffffffd2e, 0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc10c5541, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x608f02) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000380)={r6, 0x20}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3ff}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_dccp_int(r7, 0x21, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 08:39:49 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0xfffffffc}}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80200, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x2000, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000000c0)={@initdev, @private}, &(0x7f0000000140)=0xc) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000300)={0x997, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:49 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) [ 228.106222] 9pnet: Insufficient options for proto=fd [ 228.115931] 9pnet: Insufficient options for proto=fd [ 228.194425] FAULT_INJECTION: forcing a failure. [ 228.194425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.206610] CPU: 1 PID: 12857 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 228.214501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.223852] Call Trace: [ 228.226441] dump_stack+0x1b2/0x283 [ 228.230077] should_fail.cold+0x10a/0x154 [ 228.234230] __alloc_pages_nodemask+0x22c/0x2720 [ 228.238985] ? trace_hardirqs_on+0x10/0x10 [ 228.243212] ? lock_acquire+0x170/0x3f0 [ 228.247167] ? pipe_write+0xb7/0xe10 [ 228.250866] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 228.255697] ? __might_fault+0x104/0x1b0 [ 228.259763] ? copyin+0xa0/0xc0 [ 228.263038] ? copy_page_from_iter+0x4fd/0x730 [ 228.267609] alloc_pages_current+0x155/0x260 [ 228.271999] pipe_write+0x920/0xe10 [ 228.275680] __vfs_write+0x44c/0x630 [ 228.279373] ? kernel_read+0x110/0x110 [ 228.283264] ? rw_verify_area+0xe1/0x2a0 [ 228.287319] vfs_write+0x17f/0x4d0 [ 228.290845] SyS_write+0xf2/0x210 [ 228.294285] ? SyS_read+0x210/0x210 [ 228.297913] ? SyS_clock_settime+0x1a0/0x1a0 [ 228.302301] ? do_syscall_64+0x4c/0x640 [ 228.306255] ? SyS_read+0x210/0x210 [ 228.309867] do_syscall_64+0x1d5/0x640 [ 228.313749] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 228.318930] RIP: 0033:0x45d5b9 [ 228.322110] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.329810] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 228.337067] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 228.344322] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 228.351582] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 228.358828] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:49 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x4, 0x4, 0x8}) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:49 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x210100, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2000) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x2900800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport='privport'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0xfff}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@appraise_type='appraise_type=imasig'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_lt={'euid<', r4}}, {@dont_hash='dont_hash'}]}}) r5 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x6) 08:39:50 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth1_to_batadv\x00'}) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:50 executing program 2 (fault-call:4 fault-nth:13): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:50 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400c4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c928ef0810adaea52007266646e6f3ddefb948cee9637c43194159e8da4f19614427bbee58aa1235fa142f8429d4f9ed6e367caea966e6edb02188eedd1091f7c19", @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4c0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002dbd7005fedbdf2512000000080006000600000008000700010401002c0001801400020073777a5f74756e0000000000000000001400020065727370616e30000000000000000000080007ea080000000800070062000000"], 0x60}}, 0x4000000) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x800, 0x20, &(0x7f00000003c0)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x8000001, 0x2, 0x3}) [ 229.008452] FAULT_INJECTION: forcing a failure. [ 229.008452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.020790] CPU: 0 PID: 12883 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 229.028689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.038128] Call Trace: [ 229.040721] dump_stack+0x1b2/0x283 [ 229.044353] should_fail.cold+0x10a/0x154 [ 229.048506] __alloc_pages_nodemask+0x22c/0x2720 [ 229.053367] ? trace_hardirqs_on+0x10/0x10 08:39:50 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8400, 0x0) r1 = dup2(r0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0x8000, 0x1, 0x4, 0x100, 0x101, {}, {0x4, 0x1, 0x81, 0x3f, 0x1, 0x3, "9903b4bb"}, 0x1, 0x3, @fd=r2, 0x5}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 229.057604] ? lock_acquire+0x170/0x3f0 [ 229.061580] ? pipe_write+0xb7/0xe10 [ 229.065303] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 229.070144] ? __might_fault+0x104/0x1b0 [ 229.074213] ? copyin+0xa0/0xc0 [ 229.077494] ? copy_page_from_iter+0x4fd/0x730 [ 229.082076] alloc_pages_current+0x155/0x260 [ 229.086487] pipe_write+0x920/0xe10 [ 229.090114] __vfs_write+0x44c/0x630 [ 229.093828] ? kernel_read+0x110/0x110 [ 229.097722] ? rw_verify_area+0xe1/0x2a0 [ 229.101781] vfs_write+0x17f/0x4d0 [ 229.105319] SyS_write+0xf2/0x210 [ 229.108778] ? SyS_read+0x210/0x210 [ 229.112406] ? SyS_clock_settime+0x1a0/0x1a0 [ 229.116984] ? do_syscall_64+0x4c/0x640 [ 229.120954] ? SyS_read+0x210/0x210 [ 229.124583] do_syscall_64+0x1d5/0x640 [ 229.128476] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 229.133668] RIP: 0033:0x45d5b9 [ 229.136853] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.140216] 9pnet: Insufficient options for proto=fd [ 229.144586] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 08:39:50 executing program 2 (fault-call:4 fault-nth:14): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 229.144592] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 229.144597] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 229.144602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 229.144607] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c [ 229.179145] veth1_to_batadv: Invalid MTU 0 requested, hw min 68 [ 229.228454] veth1_to_batadv: Invalid MTU 0 requested, hw min 68 [ 229.234870] FAULT_INJECTION: forcing a failure. [ 229.234870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.248507] CPU: 1 PID: 12899 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 229.256394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.265738] Call Trace: [ 229.268318] dump_stack+0x1b2/0x283 [ 229.271933] should_fail.cold+0x10a/0x154 [ 229.276066] __alloc_pages_nodemask+0x22c/0x2720 [ 229.280806] ? trace_hardirqs_on+0x10/0x10 [ 229.285021] ? lock_acquire+0x170/0x3f0 [ 229.288973] ? pipe_write+0xb7/0xe10 [ 229.292668] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 229.297489] ? __might_fault+0x104/0x1b0 [ 229.301534] ? copyin+0xa0/0xc0 [ 229.304792] ? copy_page_from_iter+0x4fd/0x730 [ 229.309355] alloc_pages_current+0x155/0x260 [ 229.313745] pipe_write+0x920/0xe10 [ 229.317354] __vfs_write+0x44c/0x630 [ 229.321044] ? kernel_read+0x110/0x110 [ 229.324918] ? rw_verify_area+0xe1/0x2a0 [ 229.328957] vfs_write+0x17f/0x4d0 [ 229.332474] SyS_write+0xf2/0x210 [ 229.335903] ? SyS_read+0x210/0x210 [ 229.339505] ? SyS_clock_settime+0x1a0/0x1a0 [ 229.343894] ? do_syscall_64+0x4c/0x640 [ 229.347842] ? SyS_read+0x210/0x210 [ 229.351445] do_syscall_64+0x1d5/0x640 [ 229.355313] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 229.360480] RIP: 0033:0x45d5b9 [ 229.363646] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.371331] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 08:39:50 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe0ca}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048010}, 0x40) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:50 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 229.378578] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 229.385825] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 229.393165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 229.400414] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c [ 229.467349] 9pnet: Insufficient options for proto=fd 08:39:50 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40000) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 229.491204] 9pnet: Insufficient options for proto=fd 08:39:50 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x12b000, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x6180, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x4, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x447}, @generic={0x0, 0x0, 0x4, 0xfffe, 0x27b7}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x400, 0xd1, &(0x7f0000000180)=""/209, 0x40f00, 0x9, [], 0x0, 0x6, r1, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x3, 0x8, 0x626}, 0x10, r2}, 0x78) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000004500)=""/4100, 0x1004) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001340)={{r3}, 0x0, 0x6, @inherit={0x48, &(0x7f0000000540)={0x0, 0x0, 0xffeffffffffffff9, 0x1, {0x0, 0x422a, 0x9, 0x1, 0x1}}}, @devid}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480), 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:50 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x70}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r2, 0x0, 0x100000001, 0xfffffffffffffffc}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)={@multicast1, @rand_addr=0x64010101, 0x1, 0x9, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @rand_addr=0x64010101, @multicast1, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x1d}]}, 0x34) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) r6 = fcntl$dupfd(r2, 0x406, r5) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x140f, 0x10, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:50 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) 08:39:50 executing program 3: r0 = socket(0x23, 0x1, 0x50253d78) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8, 0x0, 0x0, 0x394f}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a4000000c93009c1f7dc27b9f3fe63edc444cbdb2bf6d6e6a8703341ae489a1c56993b74ae52f31cef474b56d51f982b888d149b254f448952cfc5600800000000000000f23827ae98acf9a69978d9424c7d6f200ff2588d093f94", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25090000004c000980080002000000000008000200c606e5ff080500000008000200a43c0000080002000200000008000100ff010000080001000800000008000100000000004400078008000200ff0100000800020000000200215b00000c0003e5060000000000000008000100ffffffff0c0003000000010000000000080002000200000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000d0a010200ea930ec600000005000000080004347d47e102"], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) 08:39:51 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x4, 0x4, 0x8}) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:51 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap='nodevmap'}, {@loose='loose'}, {@msize={'msize', 0x3d, 0x80000}}, {@mmap='mmap'}], [{@fowner_gt={'fowner>', 0xee01}}]}}) [ 229.938398] 9pnet: Insufficient options for proto=fd 08:39:51 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x6, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:51 executing program 2 (fault-call:4 fault-nth:15): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 230.052132] FAULT_INJECTION: forcing a failure. [ 230.052132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.068930] CPU: 1 PID: 12959 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 230.076805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 230.086151] Call Trace: [ 230.088724] dump_stack+0x1b2/0x283 [ 230.092347] should_fail.cold+0x10a/0x154 [ 230.096498] __alloc_pages_nodemask+0x22c/0x2720 [ 230.101270] ? trace_hardirqs_on+0x10/0x10 [ 230.105489] ? lock_acquire+0x170/0x3f0 [ 230.109460] ? pipe_write+0xb7/0xe10 [ 230.113175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 230.118008] ? __might_fault+0x104/0x1b0 [ 230.122053] ? copyin+0xa0/0xc0 [ 230.125310] ? copy_page_from_iter+0x4fd/0x730 [ 230.129872] alloc_pages_current+0x155/0x260 [ 230.134263] pipe_write+0x920/0xe10 [ 230.137875] __vfs_write+0x44c/0x630 [ 230.141566] ? kernel_read+0x110/0x110 [ 230.145439] ? rw_verify_area+0xe1/0x2a0 [ 230.149476] vfs_write+0x17f/0x4d0 [ 230.152998] SyS_write+0xf2/0x210 [ 230.156444] ? SyS_read+0x210/0x210 [ 230.160060] ? SyS_clock_settime+0x1a0/0x1a0 [ 230.164457] ? do_syscall_64+0x4c/0x640 [ 230.168428] ? SyS_read+0x210/0x210 [ 230.172051] do_syscall_64+0x1d5/0x640 [ 230.175940] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 230.181119] RIP: 0033:0x45d5b9 [ 230.184288] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.191977] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 230.199227] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 230.206483] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 230.213743] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 230.221011] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:51 executing program 4: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) pipe(&(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:51 executing program 5: pipe(&(0x7f00000000c0)) r0 = socket$isdn(0x22, 0x3, 0x22) write$binfmt_misc(r0, &(0x7f00000003c0)={'syz1', "97718b04f1e4b44a9959566d241d63703437a0add3c88fea3c775e969a15533033d370f788d95562e41b077a588c564251ae5f5249539ef1a2eeb19fcc83e75f4ad4c3cf3e1474c2eb924ff7a8ba307956bac2c4fa96d61bf8820b1ecdfd8a7128a4bcf2ef"}, 0x69) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="549549c198a7842ea6cf4844c0bce41225a8f27188c090bdff71011f435cb7712176030d1fd3b22d41d187a6f7", 0x2d}, {&(0x7f0000000140)="13644e9f3e57cb519221396cbbfabde5f9e61f99751ef51acdc504f8ca7a27c83926dc9d57f0d8e76b012b7e0da8484665252b77c24a9eabc7ded66e3ba172b3cae714e193124e2e9e35507509c8c285532ce908992df015c200cc0c534ae90f3158997fb9cc5068e373d22b94cfe3", 0x6f}, {&(0x7f0000000040)="babc105188", 0x5}, {&(0x7f00000001c0)="b65b6d8576a3f5027a3026f872d265a81849c5987f92cafb2a0a51a36667c04d77f41e350e0cd03244403452fcd9692d20f8ee98b05a6e2b39ceee7a45761d59e9a5fcf7daae812203edfac1df", 0x4d}, {&(0x7f0000000240)="e9bb2dd2e8e2ec9cc093df1fc54680f08cd92686006b8821c0baf52df75e456eccfa850f154cc055943cc866831c8223c05c902248fc94fdd79217b25e3b03522b93e9be1983531578f19f4c37502da16205aa5f2cfa539d9b4480cb84f7a8b186663fee061a4c5e444209a3979275def2ae9f998e77236fdfce0de20c3d8d07ec1d6e148a4408e38e5e4db05e17de69ce49c2", 0x93}], 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 08:39:51 executing program 3: r0 = socket(0x22, 0x800000003, 0x80000001) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) r4 = perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x2, 0x4, 0xc6, 0x80, 0x0, 0x4, 0xda808, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x800000000006}, 0x44, 0xddc, 0x4e3, 0x0, 0x1f, 0x3, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3ff}, 0x16, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x360, 0x0, 0x148, 0x0, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x64000000, 0x40000ec, 0x7, 0x4a}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x3, 0x0, 0x64, './bus\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 08:39:51 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x42, 0x0) syz_mount_image$msdos(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x1254, 0x11, 0xb, 0xa05, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x2}, [@nested={0x1b9, 0x9, 0x0, 0x1, [@generic="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", @typed={0x8, 0x7b, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0xffff}, @generic="8036e2ba57dfb1b71f8dd4055a56ab089ac40f04b60470865bea49d21dc87bbe32c6a1ae3c4abf0dd9275daddb705a3bd834903f9d7aef9ae2fe446138fddd5d2440f1d0bffcd21be19370ffd26ab4c21e4966aa762dfc555034ab24654d83c256172759dd5baf9c81f482c36bbda0369a0bbbd8f410a540a9e5707644a2b9b55d82583493e275965d1ef355026042757e6213678093534e4130b13be17e964bcdd6e53950e991c6ec0566"]}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="81bf1797b490c79c83f7375d201dbe6cae85023d32469c78b4989429c0efc0014c577bd97afe1d337e9c5f5ed0dd8d827e38536f51f9e9ac37f1085cea168675992511e504c9bd5c3f9e0cc73f79f2502871974344ae62aec7c9e1129511d69a4b25f119aa0d2af23e6f0a28231599d52c6f31eb2304e28b1d7b0d", @generic="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"]}, 0x1254}, 0x1, 0x0, 0x0, 0x4}, 0x4080) [ 230.716331] xt_hashlimit: max too large, truncated to 1048576 08:39:51 executing program 2 (fault-call:4 fault-nth:16): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:52 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d15, &(0x7f0000000000)=0x52) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e7304000000000000006f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:52 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 08:39:52 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000040)=0xfff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000004500)=""/4100, 0x1004) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000140)) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472006e733d666e673d7f4ca2de2180ae3533a00c0ae862c25b17a9e21a4ed5d4087dce6c2d0055af3b59e3caf62328cf18db325d95b077a1e98830076ec9a013418c1b55a09a6113fc24eb64cb6cad9444f887489f5fdfb6b951e42d6709213beca79eb4466be2f65f36ad8a52dd0877c46bb67783d27ff3d753d7696fd28bebf8ac77d5db7c9d616c8122f794d2bf2e969dcf359e8a6eb29bca8f9db74746d5431d1f94308e7f32", @ANYRESHEX=r0, @ANYBLOB=',wfdno}', @ANYRESHEX=r3, @ANYBLOB='-\x00', @ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRESHEX]) [ 230.954079] 9pnet: Insufficient options for proto=fd [ 230.965447] 9pnet: Insufficient options for proto=fd [ 230.991374] FAULT_INJECTION: forcing a failure. [ 230.991374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.006394] CPU: 0 PID: 12995 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 231.014293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.023642] Call Trace: [ 231.026235] dump_stack+0x1b2/0x283 [ 231.029872] should_fail.cold+0x10a/0x154 [ 231.034027] __alloc_pages_nodemask+0x22c/0x2720 [ 231.038776] ? do_raw_spin_unlock+0x164/0x220 [ 231.043262] ? check_preemption_disabled+0x35/0x240 [ 231.048295] ? perf_trace_lock+0xf7/0x490 [ 231.052436] ? perf_trace_lock_acquire+0x510/0x510 [ 231.057353] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 231.062795] ? __schedule+0x893/0x1de0 [ 231.066676] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 231.071499] ? __might_fault+0x104/0x1b0 [ 231.075571] ? copyin+0xa0/0xc0 [ 231.078834] ? copy_page_from_iter+0x4fd/0x730 [ 231.083399] alloc_pages_current+0x155/0x260 [ 231.087793] pipe_write+0x920/0xe10 [ 231.091422] __vfs_write+0x44c/0x630 [ 231.095135] ? kernel_read+0x110/0x110 [ 231.099050] ? rw_verify_area+0xe1/0x2a0 [ 231.103090] vfs_write+0x17f/0x4d0 [ 231.106612] SyS_write+0xf2/0x210 [ 231.110044] ? SyS_read+0x210/0x210 [ 231.113693] ? SyS_clock_settime+0x1a0/0x1a0 [ 231.118080] ? do_syscall_64+0x4c/0x640 [ 231.122076] ? SyS_read+0x210/0x210 [ 231.125683] do_syscall_64+0x1d5/0x640 [ 231.129553] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 231.134724] RIP: 0033:0x45d5b9 [ 231.137898] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.145582] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 08:39:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='tranq=fd\rrfdno=', @ANYRESHEX=r1, @ANYBLOB="5c1c0000e62c77", @ANYRESHEX=r2, @ANYRESDEC=r0]) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x6, 0x4) [ 231.152829] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 231.160078] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 231.167325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 231.174572] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 08:39:52 executing program 4: pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, '/dev/swradio#\x00'}}, {@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '%:\'[!('}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}) 08:39:52 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0085021315da9fa251325628291e6941bd1730add91cbf22ba580219ffd9d3fa1472cc15d1386f1e3957c967abb30f4c4b2e427092d467b62a98f16cea53cf662fc3b6f4c49247f9c43e7287ed0f218c3d4452aba121afd87beb4b82cd91da379a2e7223c7cf4e7bb50712b262fc54910e52c6c516290602b9214f38e416b9f32ad1dbc7addc597ee179bddecd8128acdc69a5d9dfa8e9ad6b72d863b6b04ac77cce701baf57688d5c794648125e2fa3e7"]) [ 231.236782] 9pnet: Insufficient options for proto=fd [ 231.246602] 9pnet: Insufficient options for proto=fd 08:39:52 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0x9, 0x9}) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6673757569643d3162356230370b52f8b76630622d646565392d393766392d65633335393662632c00084ee03b4514668246b6788bb25a25"]) 08:39:52 executing program 3: socket(0x11, 0x800000003, 0x8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00', {}, 0x4}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 231.389557] 9pnet: Insufficient options for proto=fd [ 231.410062] 9pnet: Insufficient options for proto=fd 08:39:52 executing program 5: read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@setlink={0x54, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0xffffffffffffffa0}, {0x14}]}]}]}]}, 0x54}}, 0x0) r3 = socket(0x10, 0x400000100080003, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x2e7, 0x0) 08:39:52 executing program 2 (fault-call:4 fault-nth:17): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:39:52 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) fcntl$setownex(r1, 0xf, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000140)={0x2, [0x7fffffff, 0x4, 0xfffffff7], [{0x3ff, 0x85, 0x1, 0x1, 0x1, 0x1}, {0x3ff, 0x8014, 0x1, 0x1, 0x1}, {0xffffffff, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x5, 0x1}, {0x400, 0x40, 0x0, 0x1}, {0x0, 0xfff, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x15, 0x0, 0x0, 0x1}, {0x8, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x4, 0xfffffffd, 0x1, 0x0, 0x1, 0x1}, {0x52b7, 0x1f, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x10001, 0x0, 0x1, 0x1, 0x1}], 0x50ec}) [ 231.805321] FAULT_INJECTION: forcing a failure. [ 231.805321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.820755] CPU: 0 PID: 13058 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 231.828651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.838003] Call Trace: [ 231.840597] dump_stack+0x1b2/0x283 [ 231.844232] should_fail.cold+0x10a/0x154 [ 231.848389] __alloc_pages_nodemask+0x22c/0x2720 [ 231.853140] ? do_raw_spin_unlock+0x164/0x220 [ 231.857633] ? trace_hardirqs_on+0x10/0x10 [ 231.861872] ? pipe_wait+0x171/0x190 [ 231.865587] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 231.871032] ? __schedule+0x893/0x1de0 [ 231.874924] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 231.879883] ? __might_fault+0x104/0x1b0 [ 231.883950] ? copyin+0xa0/0xc0 [ 231.887231] ? copy_page_from_iter+0x4fd/0x730 [ 231.891805] alloc_pages_current+0x155/0x260 [ 231.896193] pipe_write+0x920/0xe10 [ 231.899802] __vfs_write+0x44c/0x630 [ 231.903496] ? kernel_read+0x110/0x110 [ 231.907369] ? rw_verify_area+0xe1/0x2a0 [ 231.911410] vfs_write+0x17f/0x4d0 [ 231.914940] SyS_write+0xf2/0x210 [ 231.918378] ? SyS_read+0x210/0x210 [ 231.921987] ? SyS_clock_settime+0x1a0/0x1a0 [ 231.926423] ? do_syscall_64+0x4c/0x640 [ 231.930379] ? SyS_read+0x210/0x210 [ 231.933994] do_syscall_64+0x1d5/0x640 [ 231.937862] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 231.943028] RIP: 0033:0x45d5b9 [ 231.946192] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.953877] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 231.961123] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 231.968371] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 231.975617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 231.982865] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:53 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r5, &(0x7f0000004500)=""/4100, 0x1004) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@fowner_gt={'fowner>', r2}}, {@fowner_lt={'fowner<', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*%\x05\\'}}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}]}}) 08:39:53 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21c200a2, r5}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x401, 0x2, 0x500, 0x3, 0x20081, r5}) r6 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="1ca174016ef33d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) 08:39:53 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x280201, 0x0) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, @none}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 232.140767] 9pnet: Insufficient options for proto=fd [ 232.152757] 9pnet: Insufficient options for proto=fd 08:39:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:53 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f0000004500)=""/4100, 0x1004) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x0, 0x4}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="53f0919471f28deb58cbb465c25d28a888bb263123b6cd46a9876e62373fa14f26b33c2fab9e29b070243948580352cceff45dd1bed79b93702ed8c174dfba77a6bdfac53b0c93b47e309e2ca13c340aeb6e05464a13f52d3c23d56d08f819963c7df59a3714a150575461e2643f9993ea7b563870c182577b983386b6e3bbc3d38e5854549faec5b994b100fb14a039a896a2983bd7b222482241704bae929c1d80e900000000d66e029b037fa6c388bc8bee60cbf0f1c8843e6c136f4e2fa825b7008d2d8ef2"]) 08:39:53 executing program 3: r0 = socket(0x11, 0xf7ea636f82ad5b9e, 0x5) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:53 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x8000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 232.340553] 9pnet: Insufficient options for proto=fd 08:39:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ':&^\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2a008880}, 0x4004014) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:53 executing program 0: semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46421dae]}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000100)) 08:39:53 executing program 2 (fault-call:4 fault-nth:18): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 232.636861] FAULT_INJECTION: forcing a failure. [ 232.636861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.649091] CPU: 0 PID: 13125 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 232.657039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.666383] Call Trace: [ 232.668958] dump_stack+0x1b2/0x283 [ 232.672570] should_fail.cold+0x10a/0x154 [ 232.676702] __alloc_pages_nodemask+0x22c/0x2720 [ 232.681800] ? do_raw_spin_unlock+0x164/0x220 [ 232.686544] ? trace_hardirqs_on+0x10/0x10 [ 232.690956] ? pipe_wait+0x171/0x190 [ 232.694801] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 232.700287] ? __schedule+0x893/0x1de0 [ 232.704216] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 232.709104] ? __might_fault+0x104/0x1b0 [ 232.713189] ? copyin+0xa0/0xc0 [ 232.716484] ? copy_page_from_iter+0x4fd/0x730 [ 232.721074] alloc_pages_current+0x155/0x260 [ 232.725485] pipe_write+0x920/0xe10 [ 232.729120] __vfs_write+0x44c/0x630 [ 232.732833] ? kernel_read+0x110/0x110 08:39:53 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\b']) 08:39:53 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe9}]}, 0x39) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) set_tid_address(&(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 08:39:53 executing program 0: semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46421dae]}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x80ffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000011c0)={{{@in6=@empty, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000100)) [ 232.736724] ? rw_verify_area+0xe1/0x2a0 [ 232.740783] vfs_write+0x17f/0x4d0 [ 232.744347] SyS_write+0xf2/0x210 [ 232.747798] ? SyS_read+0x210/0x210 [ 232.751423] ? SyS_clock_settime+0x1a0/0x1a0 [ 232.755827] ? do_syscall_64+0x4c/0x640 [ 232.759799] ? SyS_read+0x210/0x210 [ 232.763427] do_syscall_64+0x1d5/0x640 [ 232.767312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 232.772505] RIP: 0033:0x45d5b9 [ 232.775705] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.783410] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 232.790672] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 232.797939] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 232.805203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 232.812467] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:54 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c1f00bf5b0000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 08:39:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, 0x40, 0x0, 0x80}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x40, 0x3}, 0x8) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x80020, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="5232b7c0e4f3edd4d9bfcedb09bd2ef89139747c5f7b0b0d129cc93aa2d8cc5ab25611ab72d6c5ee84fbcfc5734b7fbab52f12e5d9539c2ad9d4fce9d3e259c226dbcaac52c02d8f69f792cdb07d94a6e6bdfbcf33fe6d239f817dd6916a9f390f40ceda0f25c3fd975a7686ac1d5d35798e9543cc7775dd798e6813ff08dd2d678b5452bab735fddfbab4", @ANYBLOB="2c7766646e6f3d24455818abacabb07e0e0491669c7bffdbe20214e47f0df17b9a70e90364fd597bb790d616d1ba3c43e15e19cc6638df747f08f02559118300404045d6b8bbb61e3d1411d9a2094cc55d3326923c00c71356c7bc4f5a090ffabd86c7d702021765d9a33807c481c30db009ba2f9a33e18059aea0b127b85a31dd0b95e496acba18cc4a59eb7272726fb485e965855c948e94ed2aeedc6120f12c941f52c5fca6ece7be86878c5ed4d95faf38c5d8a061b311a8b449bbacd2", @ANYRESHEX=r3, @ANYRES64=r1]) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000001c0)={0x6, 0x94989eeb, 0x3ff, 0x207, 0x2, @discrete={0x7, 0x8}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r6, &(0x7f0000004500)=""/4100, 0x1004) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(r8, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:39:54 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f00000000c0)) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x400480, 0x0) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0/file0\x00', 0x7fffffff, 0x2, &(0x7f0000000580)=[{0x0}, {&(0x7f00000004c0)="b5fcc79f83356c10f5cf9ae88ca23f59907b1229b3b8a0741057ad938b1ac1e29d9551e552dd905ddcc57ddccb4c9483c773077643034211d86ebe2afb43907cf89d147c173a2a2d27dec4a6c532b20ac9ba3a13e0e9a80e4b2678ca87eba43cf31a7e019f856a81cc46f3b85224ad42cf81369cd71e45f8de51807c7f6c9720f76009de741a3702f3465478f0978060", 0x90}], 0x10040, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f6c6f63636f6f6b69652c6e6f19a40f9ce753dc5284e710f4387c6f192fed8f7a87a81392b989fcd7c4055fb7c197c1f5bca2f79f9b1b5ca59f0c7e44693b2ef97db81fb351691ed40153bb936d34df1689fe", @ANYRESDEC=0xee00, @ANYBLOB=',slackfstransmute=cpu3et.memory_spread_sl!b\x00meas']) fsync(r0) 08:39:54 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$getown(r4, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:54 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140)={0x4, 0x1, {0x2, 0x1, 0x7f, 0x2, 0x5}, 0x80000001}) [ 233.001101] 9pnet: Insufficient options for proto=fd [ 233.003697] new mount options do not match the existing superblock, will be ignored [ 233.074693] gfs2: invalid mount option: noSR8|o/z_\ ~Di;.}QiSm400000000000000060928 [ 233.087755] gfs2: can't parse mount arguments 08:39:54 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r2, {0x4}}, 0x18) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000180)={0xdf, 0x0, &(0x7f00000027c0)}) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x10000000, 0x0, 0x5, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x410000, &(0x7f0000003840)=ANY=[]) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)=0x0) ioprio_set$uid(0x0, r6, 0x4000) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) recvmsg$can_bcm(r7, &(0x7f0000000500)={&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000380)=""/196, 0xc4}], 0x3, &(0x7f00000004c0)=""/29, 0x1d}, 0x2002) 08:39:54 executing program 2 (fault-call:4 fault-nth:19): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 233.472840] FAULT_INJECTION: forcing a failure. [ 233.472840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.484795] CPU: 0 PID: 13190 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 233.492667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.502101] Call Trace: [ 233.504705] dump_stack+0x1b2/0x283 [ 233.508375] should_fail.cold+0x10a/0x154 [ 233.512520] __alloc_pages_nodemask+0x22c/0x2720 [ 233.517261] ? do_raw_spin_unlock+0x164/0x220 [ 233.521738] ? trace_hardirqs_on+0x10/0x10 [ 233.525952] ? pipe_wait+0x171/0x190 [ 233.529653] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 233.535092] ? __schedule+0x893/0x1de0 [ 233.538969] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 233.543799] ? __might_fault+0x104/0x1b0 [ 233.547862] ? copyin+0xa0/0xc0 [ 233.551136] ? copy_page_from_iter+0x4fd/0x730 [ 233.555716] alloc_pages_current+0x155/0x260 [ 233.560120] pipe_write+0x920/0xe10 [ 233.563745] __vfs_write+0x44c/0x630 [ 233.567445] ? kernel_read+0x110/0x110 [ 233.571325] ? rw_verify_area+0xe1/0x2a0 [ 233.575381] vfs_write+0x17f/0x4d0 [ 233.578963] SyS_write+0xf2/0x210 [ 233.582399] ? SyS_read+0x210/0x210 [ 233.586014] ? SyS_clock_settime+0x1a0/0x1a0 [ 233.590400] ? do_syscall_64+0x4c/0x640 [ 233.594359] ? SyS_read+0x210/0x210 [ 233.597981] do_syscall_64+0x1d5/0x640 [ 233.601860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 233.607026] RIP: 0033:0x45d5b9 [ 233.610191] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.617878] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 233.625129] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 233.632388] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 233.639655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 233.646911] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:54 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) lseek(r1, 0x1000, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 233.801428] new mount options do not match the existing superblock, will be ignored 08:39:55 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000004500)=""/4100, 0x1004) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000140)={0x1, 0x9, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="3ac7b292af6fe5bbda4672b6ff50a8a3d916e405a280f3acea69b485d92f9167bf18423d3c3c41f2a220f5edb536b32bc7bde7"]) 08:39:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f0000000140)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x20c49a, 0x0, 0x0) 08:39:55 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x20c8043, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '('}}, {@fowner_lt={'fowner<', r2}}, {@audit='audit'}, {@smackfsdef={'smackfsdef', 0x3d, 'smackfsroot'}}]}}) [ 233.878152] gfs2: invalid mount option: noSR8|o/z_\ ~Di;.}QiSm400000000000000060928 [ 233.889499] 9pnet: Insufficient options for proto=fd 08:39:55 executing program 3: r0 = socket(0x11, 0x1, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x2, 0x1002) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101200, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000180)) sendto$inet(r1, 0x0, 0x0, 0xcf7d, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x70000, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) getgid() sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:55 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xf4, 0x4, 0x10, @local, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x7, 0x2, 0xb008}}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@codepage={'codepage', 0x3d, 'cp874'}}, {@creator={'creator', 0x3d, "02000004"}}, {@type={'type', 0x3d, "ea01aa1e"}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 08:39:55 executing program 4: pipe(&(0x7f0000000040)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x2, 0xd6, "8ff532bd38355cddafc748c8af7f9be4115844ce4126104e60ddbe166dd5a3c27584c3a067c227589fd10a500fdf085e8f6ccfd412079a7811562c4a2cf01092f83fe449257928632ed1b7d10d796fc795086790afacc478576b28d5cb8ce12aa9d2e3a506f1a914c87a73620723bdc455b5791a279f03415614e2df60f046f936cfada425809d2f116fdb80dc47c9ed6c1c2370857c80ca134234ecdfa546feb8c14c0994fc59d6f28c8d8a38792640202b041a7d274a4b597f5863f8b2d5a460ad7a4b1dd822800e028b1d48a2f77e0723f44988b7"}, 0xde) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 233.949032] gfs2: can't parse mount arguments 08:39:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 08:39:55 executing program 5: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) [ 234.091251] hfs: creator requires a 4 character value [ 234.101297] hfs: unable to parse mount options 08:39:55 executing program 2 (fault-call:4 fault-nth:20): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 234.286025] FAULT_INJECTION: forcing a failure. [ 234.286025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.298112] CPU: 1 PID: 13240 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 234.306006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.315350] Call Trace: [ 234.317922] dump_stack+0x1b2/0x283 [ 234.321537] should_fail.cold+0x10a/0x154 [ 234.325685] __alloc_pages_nodemask+0x22c/0x2720 [ 234.330420] ? do_raw_spin_unlock+0x164/0x220 [ 234.334895] ? trace_hardirqs_on+0x10/0x10 [ 234.339116] ? pipe_wait+0x171/0x190 [ 234.342821] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 234.348248] ? __schedule+0x893/0x1de0 [ 234.352112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 234.356942] ? __might_fault+0x104/0x1b0 [ 234.360992] ? copyin+0xa0/0xc0 [ 234.364251] ? copy_page_from_iter+0x4fd/0x730 [ 234.368810] alloc_pages_current+0x155/0x260 [ 234.373196] pipe_write+0x920/0xe10 [ 234.376810] __vfs_write+0x44c/0x630 [ 234.380508] ? kernel_read+0x110/0x110 [ 234.384379] ? rw_verify_area+0xe1/0x2a0 [ 234.388415] vfs_write+0x17f/0x4d0 [ 234.391949] SyS_write+0xf2/0x210 [ 234.395398] ? SyS_read+0x210/0x210 [ 234.399007] ? SyS_clock_settime+0x1a0/0x1a0 [ 234.403400] ? do_syscall_64+0x4c/0x640 [ 234.407352] ? SyS_read+0x210/0x210 [ 234.410956] do_syscall_64+0x1d5/0x640 [ 234.414825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 234.419991] RIP: 0033:0x45d5b9 [ 234.423155] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 08:39:55 executing program 2 (fault-call:4 fault-nth:21): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 234.430840] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 234.438084] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 234.445329] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 234.452591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 234.459837] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:55 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, &(0x7f0000004500)=""/4100, 0x1004) sendto$inet(r3, &(0x7f0000000140)="732e0f7388d34a491e0d0c925e4c96a3f73b568315ead61c985c3a38f8b9ec5b8749abbaf90e50a7c05c1609a6335f3d17960b9ad918252db57b2a716857697ee12d953a3bc5612feefab47ccdfa2145737c59bf8cda20ecd853b61b5aee11a59886d154fd3c95842195c7c4261da808cf1ba51980c07e1104ec81df6ab2712666a335a45f1b4a34f3204934d7", 0x8d, 0x40040, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 234.624166] FAULT_INJECTION: forcing a failure. [ 234.624166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.636407] CPU: 1 PID: 13249 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 234.644296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.653646] Call Trace: [ 234.656225] dump_stack+0x1b2/0x283 [ 234.659832] should_fail.cold+0x10a/0x154 [ 234.664023] __alloc_pages_nodemask+0x22c/0x2720 [ 234.668757] ? do_raw_spin_unlock+0x164/0x220 [ 234.673231] ? trace_hardirqs_on+0x10/0x10 [ 234.677444] ? pipe_wait+0x171/0x190 [ 234.681136] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 234.686579] ? __schedule+0x893/0x1de0 [ 234.690445] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 234.695265] ? __might_fault+0x104/0x1b0 [ 234.699321] ? copyin+0xa0/0xc0 [ 234.702599] ? copy_page_from_iter+0x4fd/0x730 [ 234.707178] alloc_pages_current+0x155/0x260 [ 234.711584] pipe_write+0x920/0xe10 [ 234.715216] __vfs_write+0x44c/0x630 [ 234.718923] ? kernel_read+0x110/0x110 08:39:55 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x477d214404a33985}, "7f97c3b58965d7a4", "a1f017315013dd0f8947e880ff9c4a23", "d34ad0dc", "d6a1e1ebf2736529"}, 0x28) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 234.722814] ? rw_verify_area+0xe1/0x2a0 [ 234.726875] vfs_write+0x17f/0x4d0 [ 234.730410] SyS_write+0xf2/0x210 [ 234.733864] ? SyS_read+0x210/0x210 [ 234.737488] ? SyS_clock_settime+0x1a0/0x1a0 [ 234.741893] ? do_syscall_64+0x4c/0x640 [ 234.745862] ? SyS_read+0x210/0x210 [ 234.749493] do_syscall_64+0x1d5/0x640 [ 234.753378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 234.758543] RIP: 0033:0x45d5b9 [ 234.761708] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 08:39:55 executing program 2 (fault-call:4 fault-nth:22): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 234.769391] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 234.776635] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 234.783879] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 [ 234.791172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 234.798426] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:55 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x21028, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_measure='dont_measure'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_hash='dont_hash'}, {@hash='hash'}, {@measure='measure'}, {@pcr={'pcr', 0x3d, 0x28}}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 08:39:56 executing program 4: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wo=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 234.843921] hfs: creator requires a 4 character value [ 234.850882] hfs: unable to parse mount options 08:39:56 executing program 5: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)=0x2) pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:39:56 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0xffef, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) r2 = memfd_create(&(0x7f00000000c0)='7dev/auts~G\x00', 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x100, 0x0) mkdirat(r4, &(0x7f0000000340)='./bus/file0\x00', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1718, 0xffffffffffffffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x1, 0x11, r2, 0x0) 08:39:56 executing program 4: pipe(&(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/route\x00') getegid() r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 234.936214] 9pnet: Insufficient options for proto=fd [ 234.991214] FAULT_INJECTION: forcing a failure. [ 234.991214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.022677] CPU: 0 PID: 13273 Comm: syz-executor.2 Not tainted 4.14.197-syzkaller #0 [ 235.028841] 9pnet: Insufficient options for proto=fd [ 235.030576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.030581] Call Trace: [ 235.030598] dump_stack+0x1b2/0x283 [ 235.030618] should_fail.cold+0x10a/0x154 [ 235.040091] 9pnet: Insufficient options for proto=fd [ 235.045085] __alloc_pages_nodemask+0x22c/0x2720 [ 235.045097] ? do_raw_spin_unlock+0x164/0x220 [ 235.045108] ? trace_hardirqs_on+0x10/0x10 [ 235.045121] ? pipe_wait+0x171/0x190 [ 235.045133] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 235.045140] ? __schedule+0x893/0x1de0 [ 235.045150] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 235.045159] ? __might_fault+0x104/0x1b0 [ 235.045178] ? copyin+0xa0/0xc0 [ 235.099110] ? copy_page_from_iter+0x4fd/0x730 [ 235.103673] alloc_pages_current+0x155/0x260 [ 235.108063] pipe_write+0x920/0xe10 [ 235.111676] __vfs_write+0x44c/0x630 [ 235.115369] ? kernel_read+0x110/0x110 [ 235.119237] ? rw_verify_area+0xe1/0x2a0 [ 235.123281] vfs_write+0x17f/0x4d0 [ 235.126800] SyS_write+0xf2/0x210 [ 235.130230] ? SyS_read+0x210/0x210 [ 235.133843] ? SyS_clock_settime+0x1a0/0x1a0 [ 235.138238] ? do_syscall_64+0x4c/0x640 [ 235.142204] ? SyS_read+0x210/0x210 [ 235.145926] do_syscall_64+0x1d5/0x640 [ 235.149807] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 235.155013] RIP: 0033:0x45d5b9 [ 235.158179] RSP: 002b:00007f4762f2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.165990] RAX: ffffffffffffffda RBX: 0000000000038bc0 RCX: 000000000045d5b9 [ 235.173236] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 235.180521] RBP: 00007f4762f2eca0 R08: 0000000000000000 R09: 0000000000000000 08:39:56 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x5fe, 0x101, "ad539260ac57f8681abc4b1f1a9b23abe3ba77f5367edd425206b8b07b0f9edc", 0x1, 0x9, 0x7ff, 0x3, 0x2c0}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r3, &(0x7f0000004500)=""/4100, 0x1004) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000001c0)={0x81, 0x7fff, 0x1, 0x3, 0x4285, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r4, &(0x7f0000004500)=""/4100, 0x1004) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r5) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x3f}}, {@mmap='mmap'}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_client='access=client'}, {@cache_none='cache=none'}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@loose='loose'}], [{@fowner_lt={'fowner<', 0xee01}}, {@euid_gt={'euid>', 0xee00}}]}}) 08:39:56 executing program 4: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xe1a5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x1, 0x5, @loopback, 0x6}}, 0x200, 0x1, 0x2e, 0x94f, 0x49, 0x40, 0x1}, &(0x7f0000000040)=0x9c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 235.187769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 235.195016] R13: 00007ffdd102ea2f R14: 00007f4762f2f9c0 R15: 000000000118cf4c 08:39:56 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1}, 0x6d70) close(0xffffffffffffffff) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) 08:39:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000880)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="0000000000000000f883bbbc36cb02170000", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b00002803c00010024000100757365725f6c696e6b75705f658161626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0x114}}, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) 08:39:56 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)=0x1) sendto$inet(r1, &(0x7f0000000140)="0c268a927f1f6588b967481241ba7860ac5cf65ac6000000004895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0x4d, 0x24248cdb, 0x0, 0x0) 08:39:56 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d5ae917a05d9d388e67640c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="f100"]) [ 235.575898] 9pnet: Could not find request transport: Z]8gd rfdno=0x0000000000000005 [ 235.589913] 9pnet: Could not find request transport: Z]8gd rfdno=0x0000000000000005 [ 255.959578] Bluetooth: hci0 command 0x0406 tx timeout [ 255.959590] Bluetooth: hci1 command 0x0406 tx timeout [ 255.964833] Bluetooth: hci5 command 0x0406 tx timeout [ 255.975348] Bluetooth: hci3 command 0x0406 tx timeout [ 255.980680] Bluetooth: hci4 command 0x0406 tx timeout [ 276.437698] Bluetooth: hci2 command 0x0406 tx timeout [ 427.950831] INFO: task syz-executor.2:13285 blocked for more than 140 seconds. [ 427.958235] Not tainted 4.14.197-syzkaller #0 [ 427.963926] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.971954] syz-executor.2 D27928 13285 6377 0x00000004 [ 427.977574] Call Trace: [ 427.980750] __schedule+0x88b/0x1de0 [ 427.984550] ? io_schedule_timeout+0x140/0x140 [ 427.989109] ? trace_hardirqs_on+0x10/0x10 [ 427.993375] schedule+0x8d/0x1b0 [ 427.996733] schedule_timeout+0x80a/0xe90 [ 428.000903] ? usleep_range+0x130/0x130 [ 428.004869] ? try_to_wake_up+0x706/0x1100 [ 428.009077] ? wait_for_common+0x26a/0x430 [ 428.013352] ? lock_acquire+0x170/0x3f0 [ 428.017314] ? lock_downgrade+0x740/0x740 [ 428.021491] ? _raw_spin_unlock_irq+0x24/0x80 [ 428.025999] wait_for_common+0x272/0x430 [ 428.030190] ? out_of_line_wait_on_atomic_t+0x1a0/0x1a0 [ 428.035546] ? wake_up_q+0xd0/0xd0 [ 428.039061] ? _raw_spin_unlock_irq+0x24/0x80 [ 428.043713] flush_work+0x3fe/0x770 [ 428.047330] ? worker_thread+0xff0/0xff0 [ 428.051436] ? flush_workqueue_prep_pwqs+0x470/0x470 [ 428.056533] ? __cancel_work_timer+0x2c1/0x460 [ 428.061139] __cancel_work_timer+0x321/0x460 [ 428.066003] ? work_on_cpu_safe+0x70/0x70 [ 428.070233] ? lock_downgrade+0x740/0x740 [ 428.074379] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 428.079520] p9_fd_close+0x28d/0x420 [ 428.083224] p9_client_create+0x736/0x12c0 [ 428.087484] ? p9_client_flush+0x4c0/0x4c0 [ 428.091795] ? __lockdep_init_map+0x100/0x560 [ 428.096282] ? __raw_spin_lock_init+0x28/0x100 [ 428.101016] v9fs_session_init+0x1c5/0x1540 [ 428.105328] ? v9fs_show_options+0x6b0/0x6b0 [ 428.110316] ? v9fs_mount+0x54/0x860 [ 428.114035] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 428.119512] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 428.124515] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 428.129333] v9fs_mount+0x73/0x860 [ 428.132903] mount_fs+0x92/0x2a0 [ 428.136260] vfs_kern_mount.part.0+0x5b/0x470 [ 428.140815] do_mount+0xe53/0x2a00 [ 428.144347] ? do_raw_spin_unlock+0x164/0x220 [ 428.148937] ? copy_mount_string+0x40/0x40 [ 428.153218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 428.158223] ? copy_mnt_ns+0xa30/0xa30 [ 428.162155] ? copy_mount_options+0x1fa/0x2f0 [ 428.166646] ? copy_mnt_ns+0xa30/0xa30 [ 428.170574] SyS_mount+0xa8/0x120 [ 428.174010] ? copy_mnt_ns+0xa30/0xa30 [ 428.177886] do_syscall_64+0x1d5/0x640 [ 428.181808] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 428.186984] RIP: 0033:0x45d5b9 [ 428.190363] RSP: 002b:00007f4762f0dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.198061] RAX: ffffffffffffffda RBX: 0000000000021280 RCX: 000000000045d5b9 [ 428.205455] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000 [ 428.212776] RBP: 000000000118d030 R08: 0000000020000740 R09: 0000000000000000 [ 428.220080] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 428.227344] R13: 00007ffdd102ea2f R14: 00007f4762f0e9c0 R15: 000000000118cfec [ 428.234725] [ 428.234725] Showing all locks held in the system: [ 428.241421] 1 lock held by khungtaskd/1063: [ 428.245810] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 428.254923] 2 locks held by kworker/0:3/7419: [ 428.259412] #0: ("events"){+.+.}, at: [] process_one_work+0x6b0/0x14a0 [ 428.268257] #1: ((&m->rq)){+.+.}, at: [] process_one_work+0x6e6/0x14a0 [ 428.276779] [ 428.278391] ============================================= [ 428.278391] [ 428.285435] NMI backtrace for cpu 1 [ 428.289052] CPU: 1 PID: 1063 Comm: khungtaskd Not tainted 4.14.197-syzkaller #0 [ 428.296473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.305808] Call Trace: [ 428.308411] dump_stack+0x1b2/0x283 [ 428.312021] nmi_cpu_backtrace.cold+0x57/0x93 [ 428.316497] ? irq_force_complete_move.cold+0x7c/0x7c [ 428.321663] nmi_trigger_cpumask_backtrace+0x13a/0x17f [ 428.326916] watchdog+0x5b9/0xb40 [ 428.330351] ? hungtask_pm_notify+0x50/0x50 [ 428.334655] kthread+0x30d/0x420 [ 428.337994] ? kthread_create_on_node+0xd0/0xd0 [ 428.342638] ret_from_fork+0x24/0x30 [ 428.346449] Sending NMI from CPU 1 to CPUs 0: [ 428.351367] NMI backtrace for cpu 0 [ 428.351371] CPU: 0 PID: 3648 Comm: systemd-journal Not tainted 4.14.197-syzkaller #0 [ 428.351375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.351377] task: ffff88809477e240 task.stack: ffff888094780000 [ 428.351380] RIP: 0010:__lock_acquire+0x883/0x3f20 [ 428.351382] RSP: 0018:ffff888094787840 EFLAGS: 00000046 [ 428.351387] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 4ec9851831ca92b4 [ 428.351390] RDX: 1ffff110128efd57 RSI: 0000000000000001 RDI: ffffffff8a0c6040 [ 428.351392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000020012 [ 428.351395] R10: ffff88809477eac8 R11: ffff88809477e240 R12: ffff88809477eae0 [ 428.351398] R13: 0000000000000001 R14: 4ec9851831ca92b4 R15: ffffffff8a5a8c00 [ 428.351402] FS: 00007f12462448c0(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 428.351404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.351407] CR2: 00007f12437e4000 CR3: 00000000944a5000 CR4: 00000000001406f0 [ 428.351410] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.351413] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 428.351415] Call Trace: [ 428.351417] ? trace_hardirqs_on+0x10/0x10 [ 428.351419] ? __lock_acquire+0x5fc/0x3f20 [ 428.351421] ? trace_hardirqs_on+0x10/0x10 [ 428.351423] ? deref_stack_reg+0x124/0x1a0 [ 428.351426] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 428.351428] ? unwind_next_frame+0xe54/0x17d0 [ 428.351430] ? __save_stack_trace+0x63/0x160 [ 428.351432] ? deref_stack_reg+0x124/0x1a0 [ 428.351434] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 428.351436] lock_acquire+0x170/0x3f0 [ 428.351438] ? __bpf_address_lookup+0x310/0x310 [ 428.351441] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 428.351443] is_bpf_text_address+0x35/0x150 [ 428.351445] ? __bpf_address_lookup+0x310/0x310 [ 428.351447] kernel_text_address+0xbd/0xf0 [ 428.351449] __kernel_text_address+0x9/0x30 [ 428.351451] unwind_get_return_address+0x51/0x90 [ 428.351454] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 428.351456] __save_stack_trace+0xa0/0x160 [ 428.351457] kasan_kmalloc+0xeb/0x160 [ 428.351459] ? kasan_kmalloc+0xeb/0x160 [ 428.351461] ? kmem_cache_alloc+0x111/0x3c0 [ 428.351463] ? getname_flags+0xc8/0x550 [ 428.351465] ? user_path_at_empty+0x2a/0x50 [ 428.351467] ? SyS_faccessat+0x21b/0x680 [ 428.351469] ? do_syscall_64+0x1d5/0x640 [ 428.351472] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 428.351474] ? kasan_kmalloc+0xeb/0x160 [ 428.351476] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 428.351478] ? trace_hardirqs_on+0x10/0x10 [ 428.351480] ? cache_alloc_refill+0x2fa/0x350 [ 428.351483] ? lock_downgrade+0x740/0x740 [ 428.351485] ? do_raw_spin_unlock+0x164/0x220 [ 428.351487] ? _raw_spin_unlock+0x29/0x40 [ 428.351490] ? cache_alloc_refill+0x2fa/0x350 [ 428.351492] ? kmem_cache_alloc+0x2c8/0x3c0 [ 428.351494] kmem_cache_alloc+0x111/0x3c0 [ 428.351496] getname_flags+0xc8/0x550 [ 428.351497] user_path_at_empty+0x2a/0x50 [ 428.351499] SyS_faccessat+0x21b/0x680 [ 428.351501] ? SyS_fallocate+0x80/0x80 [ 428.351503] ? do_syscall_64+0x4c/0x640 [ 428.351505] ? SyS_faccessat+0x680/0x680 [ 428.351507] do_syscall_64+0x1d5/0x640 [ 428.351509] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 428.351511] RIP: 0033:0x7f12455009c7 [ 428.351514] RSP: 002b:00007ffeeed0cf38 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 428.351519] RAX: ffffffffffffffda RBX: 00007ffeeed0ff60 RCX: 00007f12455009c7 [ 428.351522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055786698f9a3 [ 428.351525] RBP: 00007ffeeed0d080 R08: 00005578669853e5 R09: 0000000000000018 [ 428.351528] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 428.351530] R13: 0000000000000000 R14: 0000557866ab88c0 R15: 00007ffeeed0d570 [ 428.351532] Code: 0f 85 ec 26 00 00 8b 35 1c e1 cc 06 85 f6 0f 84 12 f9 ff ff 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 20 48 c1 ea 03 80 3c 02 00 <0f> 85 aa 26 00 00 48 8b 54 24 18 4d 89 b3 78 08 00 00 48 b8 00 [ 428.352010] Kernel panic - not syncing: hung_task: blocked tasks [ 428.732542] CPU: 1 PID: 1063 Comm: khungtaskd Not tainted 4.14.197-syzkaller #0 [ 428.739987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.749322] Call Trace: [ 428.751892] dump_stack+0x1b2/0x283 [ 428.755495] panic+0x1f9/0x42d [ 428.758663] ? add_taint.cold+0x16/0x16 [ 428.762628] watchdog+0x5ca/0xb40 [ 428.766064] ? hungtask_pm_notify+0x50/0x50 [ 428.770359] kthread+0x30d/0x420 [ 428.773698] ? kthread_create_on_node+0xd0/0xd0 [ 428.778343] ret_from_fork+0x24/0x30 [ 428.783708] Kernel Offset: disabled [ 428.787326] Rebooting in 86400 seconds..